Eml_parser

The eml_parser library is vulnerable to a CPU exhaustion denial-of-service attack due to a regex-based algorithm in 'Received' header parsing that triggers quadratic complexity when processing deeply nested parentheses.

CVE-2026-44844 is a denial-of-service vulnerability in Microsoft's eml_parser due to recursion in nested message/rfc822 attachments, potentially causing a service outage.