Go standard library net/textproto
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-94440 | < 1.26.9 ; 1.27.0-0 – < 1.27.2 | Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart | HIGH 7.5 | 0.5 % | ||
| CVE-2026-42507 | < 1.25.11 ; 1.26.0-0 – < 1.26.4 | Arbitrary inputs are included in errors without any escaping in net/textproto | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-61724 | < 1.24.8 ; 1.25.0 – < 1.25.2 | Excessive CPU consumption in Reader.ReadResponse in net/textproto | MEDIUM 5.3 | 0.6 % | ||
| CVE-2023-45290 | < 1.21.8 ; 1.22.0-0 – < 1.22.1 | Memory exhaustion in multipart form parsing in net/textproto and net/http | MEDIUM 6.5 | 1.2 % | ||
| CVE-2023-24534 | < 1.19.8 ; 1.20.0-0 – < 1.20.3 | Excessive memory allocation in net/http and net/textproto | HIGH 7.5 | 1.9 % | ||
| CVE-2023-24536 | < 1.19.8 ; 1.20.0-0 – < 1.20.3 | Excessive resource consumption in net/http, net/textproto and mime/multipart | HIGH 7.5 | 1.5 % |