—
GO-2026-5038
Quadratic complexity in WordDecoder.DecodeHeader in mime
Quick fix
GO-2026-5038 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.25.11Details
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
Are you affected?
Enter the version of the package you're using.