CVE Watch22 jul 2026

CVE-2026-42507

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to

CVSS

5.3

Medio

EPSS

0.4%

p31

KEV

—

Exploit Today

0-100

Publicado: 2 jun 2026 · Última mod.: 22 jul 2026

EPSS · 30d

0.4%EPSS · 30 días0.4%

2026-08-222026-09-19

Descripción técnica

When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.

Referencias oficiales

go.devhttps://go.dev/cl/777060
go.devhttps://go.dev/issue/79346
groups.google.comhttps://groups.google.com/g/golang-announce/c/tKs3rmcBcKw
pkg.go.devhttps://pkg.go.dev/vuln/GO-2026-5039

CVEs relacionados

Sin CVEs relacionados por CWE o producto.