net/textproto

6 results · Feed

• High 7.5
  CVE-2026-94440

  Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

  Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.

  Go standard library net/textproto mime/multipart golang Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 8, 2026
• Medium 5.3
  CVE-2026-42507

  Arbitrary inputs are included in errors without any escaping in net/textproto

  When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.

  Go standard library net/textproto golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 2, 2026
• Medium 5.3
  CVE-2025-61724

  Excessive CPU consumption in Reader.ReadResponse in net/textproto

  The Reader.ReadResponse function constructs a response string through repeated string concatenation of lines. When the number of lines in a response is large, this can cause excessive CPU consumption.

  Go standard library net/textproto katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Oct 29, 2025
• Medium 6.5
  CVE-2023-45290

  Memory exhaustion in multipart form parsing in net/textproto and net/http

  When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not applied to the memory consumed while readi…

  Go standard library net/textproto golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Mar 5, 2024
• High 7.5
  CVE-2023-24534

  Excessive memory allocation in net/http and net/textproto

  HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate…

  Go standard library net/textproto katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 6, 2023
• High 7.5
  CVE-2023-24536

  Excessive resource consumption in net/http, net/textproto and mime/multipart

  Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consum…

  Go standard library net/textproto mime/multipart katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi Go
  Apr 6, 2023