Vulnerabilidades do Go standard library Net/textproto

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Go standard library Net/textproto: 3 registro(s), com versões afetadas e correções.

CVE-2026-94440 Alta · 7.5 CWE-770 08/10/2026

Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.

CVE-2026-42507 Média · 5.3 02/06/2026

Arbitrary inputs are included in errors without any escaping in net/textproto

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.

CVE-2025-61724 Média · 5.3 CWE-770 29/10/2025

Excessive CPU consumption in Reader.ReadResponse in net/textproto

The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.