net/textproto vulnerabilities

3 known vulnerabilities in net/textproto from Go standard library. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  net/textproto: Allocation of Resources Without Limits or Throttling

  CVE-2026-94440Oct 8, 2026Go standard library

  Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.

• 7.5 High severity

  mime/multipart: Allocation of Resources Without Limits or Throttling

  CVE-2023-24536Apr 6, 2023Go standard libraryEPSS 1.48%

  Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume

• 7.5 High severity

  net/textproto: Uncontrolled Resource Consumption

  CVE-2023-24534Apr 6, 2023Go standard libraryEPSS 1.89%

  HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual patterns of input data can cause the common function used to parse HTTP and MIME headers to allocate