CVE-2025-1795

LowCVSS 2.3/10Last modified Jul 31, 2026

Description

During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.

Metrics

CVSS 4.0 2.3/10

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-116

Affected software

Vendor	Product	Versions
Python Software Foundation	CPython	< 3.9.23; >= 3.10.0, < 3.10.17; >= 3.11.0, < 3.11.9; >= 3.12.0, < 3.12.3; >= 3.13.0a1, < 3.13.0a5

References

Timeline

Published: Feb 28, 2025
Last modified: Jul 31, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-17968.8A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a we CVE-2025-17976.3A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management an CVE-2025-17986.1The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform CVE-2025-17996.3A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file ven CVE-2025-18008.8A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_detail CVE-2025-18018.1A flaw was found in the Ansible aap-gateway. Concurrent requests handled by the gateway grpc service can result in concurrency issues due to CVE-2025-18025.4The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘marker_title’, 'notif CVE-2025-18047.0A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some un CVE-2025-18055.3Crypt::Salt for Perl version 0.01 uses insecure rand() function when generating salts for cryptographic purposes.CVE-2025-18064.3A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknow CVE-2025-18073.5A vulnerability, which was classified as problematic, was found in Eastnets PaymentSafe 2.5.26.0. This affects an unknown part of the file /CVE-2025-18087.3A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /