CVE-2026-42504

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

Allocation of Resources Without Limits or Throttling

Overview std/mime is a Go standard library package std/mime Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling. Go Vulnerability Report: Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

Debian DSA-064-1 : w3m - buffer overflow

SecureNet Service reported that w3m a console web browser has a buffer overflow in its MIME header parsing code. This could be exploited by an attacker if by making a web-server a user visits return carefully crafted MIME headers. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descripti...