CVE-2026-94440 — Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

2026-10-09T17:39:18.156771+00:00

Affected: Go standard library net/textproto, Go standard library mime/multipart

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.

Most recent entries from all

CVE-2026-94440 — Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart