HIGH7.5
GO-2026-6608
Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart
Quick fix
GO-2026-6608 — stdlib: upgrade to the fixed version with the command below.
go get stdlib@v1.26.9Details
Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes.
Are you affected?
Enter the version of the package you're using.