Skip to content

Known vulnerabilities in Go standard library mime/multipart

Is your version affected?

CVE Summary Score Published
CVE-2026-94440 Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit… 7.5 High Oct 8, 2026
CVE-2023-24536 Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large… 7.5 High Apr 6, 2023
CVE-2022-41725 A denial of service is possible from excessive resource consumption in net/http and mime/multipart Not rated Feb 28, 2023

Other Go standard library products