Threats Tagged 'ghsa-874m-fcc5-9gqf'

CVE-2026-94440 is a high-severity vulnerability in the Go standard library net/textproto package. It involves allocation of resources without limits or throttling when parsing multipart forms. Specifically, the vulnerability allows bypassing memory limits and reading an arbitrarily long line into memory if the remaining limit at the start of a part is less than 400 bytes. This can lead to excessive memory consumption and potential denial of service.