PT-2026-108316 · Go Standard Library+1 · Mime/Multipart+2

·

CVE-2026-94440

·

Published

2026-10-08

·

Updated

2026-10-08

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)
Description Parsing a multipart form can bypass memory limits, allowing an arbitrarily long line to be read into memory. This occurs when the remaining limit at the start of a part is less than 400 bytes.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-94440
GO-2026-6608

Affected Products

Mime/Multipart
Net/Textproto
Stdlib