Skip to content

Vulnerabilities of Go standard library net/textproto

Is your version affected?

CVE Summary Score Published
CVE-2026-94440 Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit… 7.5 High Oct 8, 2026
CVE-2026-42507 When returning errors, functions in the net/textproto package would include its input as part of the error 5.3 Medium Jun 2, 2026
CVE-2025-61724 The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines 5.3 Medium Oct 29, 2025
CVE-2023-45290 When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue,… 6.5 Medium Mar 5, 2024
CVE-2023-24534 HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading… 7.5 High Apr 6, 2023
CVE-2023-24536 Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large… 7.5 High Apr 6, 2023

Other Go standard library products