CVE-2026-94440: net/textproto 0 to before 1.26.9, 1.27.0-0 to before 1.27.2; +1 more affected products

Affected technology

net/textproto · 0 to before 1.26.9, 1.27.0-0 to before 1.27.2
Go standard library

mime/multipart · 0 to before 1.26.9, 1.27.0-0 to before 1.27.2
Go standard library

Component: Not specified by the source
Function: readMIMEHeader, Reader.readContinuedLineSlice, Reader.ReadContinuedLine, Reader.ReadContinuedLineBytes, Reader.ReadMIMEHeader, Part.populateHeaders, Reader.readForm, Reader.NextPart, Reader.NextRawPart, Reader.ReadForm

What an attacker can do

The source does not specify what an attacker can achieve.