En resumen
- CVE-2026-42504 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a stdlib.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.56%, mayor que el 46.6% de las vulnerabilidades.
- Solución: actualizar a 1.26.4, 1.25.11 o posterior.
| Package | Affected versions | Patched versions |
|---|
| stdlib Go | ≥ 1.26.0-0, < 1.26.4< 1.25.11
| 1.26.41.25.11
|
Description
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
NVD description
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free