Go standard library mime/multipart

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-94440< 1.26.9 ; 1.27.0-0 – < 1.27.2Memory limit bypass when parsing MIME headers in net/textproto, mime/multipartHIGH 7.50.5 %
CVE-2023-24536< 1.19.8 ; 1.20.0-0 – < 1.20.3Excessive resource consumption in net/http, net/textproto and mime/multipartHIGH 7.51.5 %
CVE-2022-41725< 1.19.6 ; 1.20.0-0 – < 1.20.1Excessive resource consumption in mime/multipartHIGH 7.51.2 %