IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.5Yüksek

CVE-2026-94440Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart

Go standard library net/textproto; Go standard library mime/multipart Yayım: (1 ay önce)

Açıklama

Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.

Zayıflık türü (CWE): CWE-770

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Go standard library mime/multipart < 1.26.9, 1.27.0-0 – < 1.27.2
Go standard library net/textproto < 1.26.9, 1.27.0-0 – < 1.27.2

Kaynaklar ve yamalar

Aynı üründe son açıklar — Go

Puansız
CVE-2026-97054

HTTP/1 server crash due to MaxBytesReader header race in net/http

Go standard library net/http

For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. As a result, an HTTP/1 server that utilizes …