mime/multipart vulnerabilities
3 known vulnerabilities in mime/multipart from Go standard library. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
net/textproto: Allocation of Resources Without Limits or Throttling
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.
- 7.5 High severity
mime/multipart: Allocation of Resources Without Limits or Throttling
Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume
- 7.5 High severity
mime/multipart: Allocation of Resources Without Limits or Throttling
A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the