Aller au contenu

Vulnérabilités de Go standard library net/textproto

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-94440 Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit… 7.5 Élevée 8 oct. 2026
CVE-2026-42507 When returning errors, functions in the net/textproto package would include its input as part of the error 5.3 Moyenne 2 juin 2026
CVE-2025-61724 The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines 5.3 Moyenne 29 oct. 2025
CVE-2023-45290 When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue,… 6.5 Moyenne 5 mars 2024
CVE-2023-24534 HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading… 7.5 Élevée 6 avr. 2023
CVE-2023-24536 Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large… 7.5 Élevée 6 avr. 2023

Autres produits Go standard library