VDB
KO

GO-2026-5038

Quadratic complexity in WordDecoder.DecodeHeader in mime

Details

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / stdlib
Introduced in: 0 Fixed in: 1.25.11
Fix go get stdlib@v1.25.11

References