lestrrat-go — Vulnerabilities & Security Advisories 3

Lestrrat-go is a Go library for handling MIME structures and email parsing, commonly used in email processing applications. Historically, it has been susceptible to remote code execution vulnerabilities due to unsafe parsing of complex MIME structures and cross-site scripting flaws through improper input sanitization. The library has also faced privilege escalation issues in certain configurations. While no major public security incidents have been documented, the three CVEs recorded highlight risks in input validation and memory handling. Developers should implement strict input validation and consider sandboxing when processing untrusted email content to mitigate potential exploitation vectors.