{"answers":{"affected":"2 open source packages ship an affected version, including golang and stdlib. It affects 1 product.","exploited":"There is no known exploitation of CVE-2026-42499 in the wild and no public exploit code.","fix":"Upgrade golang to a fixed version for your release line: 1.25.10 or 1.26.3.","what":"CVE-2026-42499 is a high-severity denial of service vulnerability in Golang Go, published on 7 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2026-42499 and fix it if it is affected.\n\nWhat it is: CVE-2026-42499 is a high-severity denial of service vulnerability in Golang Go, published on 7 May 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2026-42499 in the wild and no public exploit code.\n\nAffected packages and fixed versions:\n- golang (Bitnami): affected all versions; fixed in 1.25.10, 1.26.3\n- stdlib (Go): affected all versions; fixed in 1.25.10, 1.26.3\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2026-42499/ (Markdown: https://insights.sbomify.com/CVE-2026-42499/index.md)","id":"CVE-2026-42499","markdown":"https://insights.sbomify.com/CVE-2026-42499/index.md","name":"CVE-2026-42499","record":{"aliases":["AZL-98757","BELL-CVE-2026-42499","BIT-golang-2026-42499","CLEANSTART-2026-AE50754","CLEANSTART-2026-EF06318","CLEANSTART-2026-GQ93723","CLEANSTART-2026-IM42663","CLEANSTART-2026-OD21402","CLEANSTART-2026-PI24714","CLEANSTART-2026-PP02789","CLEANSTART-2026-QF93365","CLEANSTART-2026-QK41185","CLEANSTART-2026-ZC37242","CLEANSTART-2026-ZJ82882","CLSA-2026-1788858046","DEBIAN-CVE-2026-42499","ECHO-1af9-32d8-dc4e","GHSA-xq5j-9r39-c3vf","GO-2026-4977","MINI-22hr-fm53-wv3r","MINI-242j-2w2r-37jw","MINI-257p-w3xw-fw6v","MINI-258q-3952-h5cc","MINI-25j5-5462-6m93","MINI-25jf-hggh-3cvq","MINI-25p7-cx5g-84jw","MINI-25vg-j737-qc4v","MINI-25vr-q769-4mg3","MINI-2668-52hx-xm98","MINI-266r-3gm6-vgww","MINI-276v-f64j-3jwc","MINI-27c9-rh38-g58q","MINI-27r7-qq35-p3m4","MINI-27v7-hj2q-fgwf","MINI-27x6-hcr7-ff2v","MINI-282r-wj55-fqvr","MINI-28c4-97gw-4mr7","MINI-28p2-32q2-ph92","MINI-297q-27gg-x495","MINI-29gr-x5m6-92j7","MINI-29hp-jmm2-2gcg","MINI-2f8p-4vhf-pj7v","MINI-2gjr-2q4w-jv7j","MINI-2h39-r23f-2jxj","MINI-2jg2-c7pc-cjrc","MINI-2jx4-hp4m-cqq7","MINI-2pj9-4jgm-gghr","MINI-2qj7-c6h6-9hpx","MINI-2rxc-65h7-57wm","MINI-2v3j-4h6q-22mp","MINI-2vx7-c4cf-7q37","MINI-2wcj-hj63-h4j2","MINI-2wj2-jwg7-6jw3","MINI-2x3c-fhqc-4f6q","MINI-2x56-r34j-vpwh","MINI-2xg4-gqc9-4jph","MINI-2xq3-4xw2-35r9","MINI-2xrg-qg7c-rpxm","MINI-32c5-r9f3-fjgg","MINI-32rm-7q8p-rxp6","MINI-32w5-vq96-79c9","MINI-332r-mr9j-597m","MINI-334g-mq2f-6f6g","MINI-33hj-x45r-76rq","MINI-33qm-hvq5-xpg2","MINI-33w3-4x7c-4hjg","MINI-342f-6rr8-h2p5","MINI-35m2-fffc-7fm2","MINI-35qf-cg48-gg7p","MINI-3626-grjm-r4h7","MINI-362r-5g2x-9wf3","MINI-3777-7x6g-44fv","MINI-382g-4wh2-qwwr","MINI-39r6-h3cr-8jm3","MINI-39w2-26pm-4jcc","MINI-3c52-j2w9-237c","MINI-3cpx-j9f3-fc7h","MINI-3cx3-rqpg-gfrp","MINI-3cxj-46j4-pqhj","MINI-3f5q-2hxm-4mc9","MINI-3fmh-5vfm-mfjw","MINI-3gwg-2hj6-f672","MINI-3h9j-2mc4-q44f","MINI-3jcx-mv4q-9mvc","MINI-3jvm-qr45-q3qg","MINI-3mf6-q848-jm45","MINI-3mfq-qpwj-xwj6","MINI-3mvj-4763-5vvc","MINI-3p85-cjp8-vgmw","MINI-3q22-cjph-p488","MINI-3r28-ghrm-f8q9","MINI-3r88-qm47-w2x7","MINI-3r9m-xw5v-cj57","MINI-3rp9-grvq-whxj","MINI-3rq2-9r8f-rg59","MINI-3vj3-p843-g53q","MINI-3w7p-4wjh-6567","MINI-3w87-2w2q-mg8r","MINI-3wfg-hg67-f5vm","MINI-3wg3-94p2-cvw6","MINI-3wgc-w6vx-vccv","MINI-3x94-78w8-xp86","MINI-3xcr-m5f7-vh8v","MINI-3xrr-vx2h-m57m","MINI-3xvq-c82h-xw78","MINI-429f-497h-9wgr","MINI-4327-8x4v-5j83","MINI-43mm-pcr8-pv5x","MINI-43w2-3qj6-hqh3","MINI-447c-m675-jwc6","MINI-44m2-2pmj-x8c2","MINI-44vr-9xgm-pw5j","MINI-44x9-vvxx-6pxx","MINI-46f3-pw59-7p9r","MINI-46vx-rv26-q232","MINI-472m-c9xh-vv36","MINI-476j-35mw-m28v","MINI-479x-rv8w-9rj5","MINI-47gw-4rxr-57j6","MINI-4842-3355-48fw","MINI-485j-v842-33vc","MINI-4889-xr43-j783","MINI-494w-hwpw-mghp","MINI-4c8h-wmc2-5fv7","MINI-4cjm-8g34-7gq3","MINI-4cqx-qmqp-mg53","MINI-4f3h-q2rm-952v","MINI-4f6x-xxj4-3f52","MINI-4f8m-qx7q-f7f9","MINI-4fpr-q66x-pw3c","MINI-4fq3-g9xq-5r25","MINI-4grj-gfph-3xvp","MINI-4hh7-mxj5-fffm","MINI-4hqc-q7wr-wfc9","MINI-4j28-mjjq-v22m","MINI-4j9h-gxq2-3mqg","MINI-4jv9-cc9x-58x3","MINI-4mpr-xfc6-2gj6","MINI-4mv2-993m-3jgj","MINI-4mvg-c9m6-mh2w","MINI-4p6r-m85h-38hx","MINI-4pjv-3w29-p2x3","MINI-4pjx-8828-9w65","MINI-4pp9-hq3r-p5gh","MINI-4q28-w5m9-cq32","MINI-4q4p-v73p-xcph","MINI-4r9c-4wcv-qr9w","MINI-4rqj-x37r-qgc9","MINI-4rrq-5w44-r4w9","MINI-4v66-7355-9jcv","MINI-4wp4-72pj-hp65","MINI-4x5j-7756-g2fr","MINI-4x94-6xcf-58qr","MINI-4xw7-qf93-fv2p","MINI-5254-r8r8-26vm","MINI-528w-f767-frq6","MINI-53v3-wmwp-6pq8","MINI-54jg-667j-4wc5","MINI-54jj-9mqv-c68g","MINI-54vr-6wcf-jj4f","MINI-54x8-9gv4-9vf8","MINI-5557-h799-p2mm","MINI-55cm-9mgw-98rh","MINI-55gc-mvr2-3gh9","MINI-5685-7vx3-xx8j","MINI-57vp-2r25-grc3","MINI-58j9-vc5g-vmx9","MINI-593g-h93m-p6rr","MINI-597m-5x47-398p","MINI-59m3-qx5f-5v6g","MINI-59qg-725h-wh94","MINI-59r5-j93g-jp6c","MINI-59x6-qv9x-p949","MINI-5c2g-hqx7-qpvx","MINI-5c48-894q-5fcq","MINI-5crx-rxwv-7f8q","MINI-5fr9-vhf8-8j69","MINI-5fvw-r82h-gr23","MINI-5g47-qgr9-rgw7","MINI-5gm6-q5h6-gq5m","MINI-5h58-6vhx-32gm","MINI-5hm8-h34g-rrjc","MINI-5jhh-42h9-gjj2","MINI-5jwj-q36r-rp99","MINI-5m5q-h7c4-4mx7","MINI-5m72-j9fc-3qw4","MINI-5m8c-6cx6-qx94","MINI-5p38-5j42-3657","MINI-5rqp-2cm6-cc25","MINI-5vv6-4hp8-x7wr","MINI-5xj8-wg5m-rwqx","MINI-5xv3-x2wm-cx8c","MINI-5xv4-53m9-35h9","MINI-622v-83v6-fj34","MINI-6246-96j6-rcj6","MINI-62qg-j252-mgjf","MINI-63gp-gpxp-jqjw","MINI-6584-5cp7-9x9m","MINI-65qm-g595-85mw","MINI-662v-pjpm-97ch","MINI-668m-hg2g-96v4","MINI-66fm-r554-3vh6","MINI-66j3-p788-cxm6","MINI-68f8-xp8x-629g","MINI-69ff-4rrh-47mw","MINI-69v9-jh8r-7rrg","MINI-6c8j-68jh-5238","MINI-6c94-376c-gc6p","MINI-6cqh-393g-chpf","MINI-6f3w-724p-qm7q","MINI-6g2q-2hwg-7qpq","MINI-6g37-898q-7h4j","MINI-6g3m-mv98-8jcf","MINI-6grf-7rxc-64fm","MINI-6hj7-ww87-x9h4","MINI-6hwf-h46m-4rv6","MINI-6mvh-j7q5-wc7p","MINI-6pgc-3jpq-6x87","MINI-6pgx-rphw-55j3","MINI-6q89-4449-r5gp","MINI-6r2x-63p2-pxx7","MINI-6rgv-cq4m-wxwg","MINI-6rxp-9fpq-9gxv","MINI-6v83-hxgx-gqxf","MINI-6vf2-6397-7w2q","MINI-6vqm-g3qv-p5g6","MINI-6vrh-rvmm-j83f","MINI-6vrm-3f3p-g5m5","MINI-6w2v-gp3q-w42r","MINI-6x47-r22w-fq6v","MINI-6x92-4cf6-34jq","MINI-6xx6-5mg3-xrvq","MINI-733p-gcw8-6rp5","MINI-7346-3xv7-xfhv","MINI-75px-2rvh-6qf8","MINI-75xq-3crv-5r9j","MINI-768r-43c8-cffv","MINI-774p-cpfc-f665","MINI-77hj-h62j-jh46","MINI-77r2-99cw-gw42","MINI-77wj-6v62-chm4","MINI-784q-8px6-pr88","MINI-78hh-26h6-vwpv","MINI-79r2-h2cr-87f9","MINI-7c89-jxf8-qc38","MINI-7ccj-74mc-rg84","MINI-7cj8-gmq2-q8g7","MINI-7f9c-2vm5-9453","MINI-7fj9-xfx7-33vg","MINI-7gf6-mrwq-4vxm","MINI-7jff-f5p9-8j6x","MINI-7mfv-rj9f-285p","MINI-7mfw-rmfg-6v26","MINI-7p29-97qp-wmmf","MINI-7p4g-c82h-rgfv","MINI-7p8w-43q3-m35r","MINI-7q4f-5wfp-j34p","MINI-7rph-j5hh-85h3","MINI-7v2m-72qq-2q84","MINI-7v58-4frj-v8f4","MINI-7vm7-fwcm-w97c","MINI-7w27-35gq-q96f","MINI-7w6h-63qf-6fwf","MINI-7wcj-xv5h-637j","MINI-7wr5-qfh7-cjg7","MINI-7x6v-ggr8-6fv3","MINI-82x8-vp37-9g23","MINI-837m-wx85-qxj6","MINI-83wx-v82j-g36h","MINI-85wh-qff8-qm8x","MINI-873c-g7qp-vw6x","MINI-8784-fmff-p2vp","MINI-87c9-fqp5-r9rw","MINI-8847-r4xx-qggx","MINI-885m-rg67-75m2","MINI-888j-m3gc-rqfh","MINI-88jf-7v6q-2r5m","MINI-88rf-g6f6-q5r9","MINI-89hw-qp8v-gqrj","MINI-8f4c-hvv8-59gr","MINI-8f6p-px76-jf27","MINI-8fgj-cf34-h37q","MINI-8frc-xfm6-88v8","MINI-8gg5-ccrr-4j8p","MINI-8h3v-wqwr-7wf6","MINI-8h5q-q22g-6g59","MINI-8hcc-rwwx-495v","MINI-8hg2-c955-cmp6","MINI-8j7p-3jrc-84v3","MINI-8jp5-5q5x-rvj8","MINI-8mh8-jpr9-4hrc","MINI-8p3f-p22x-823f","MINI-8q58-2339-x7jf","MINI-8qx3-7mv9-6r95","MINI-8r7j-w4p2-xq4v","MINI-8rcm-h6j4-9jg4","MINI-8w5j-4cc4-w2p7","MINI-8wmj-2qcc-rqjv","MINI-8wrm-8px7-cxwx","MINI-8wx2-q5pc-w49g","MINI-8x8j-mw9m-vx59","MINI-8xhg-2mwr-g57h","MINI-9223-jmc6-g69w","MINI-926v-rc4x-m4w8","MINI-92px-fm9c-pv67","MINI-93hr-fhwg-pg9r","MINI-9492-5jgf-6v3g","MINI-9535-j25j-xgg3","MINI-9552-7c5p-2pgp","MINI-957p-f5hp-69wf","MINI-963p-wxcf-xf4g","MINI-96rm-pc4g-mh74","MINI-97gg-cgcg-98p7","MINI-97vp-hxf4-r3m7","MINI-98c6-283m-v457","MINI-98j3-62rf-7j6j","MINI-98j7-qwr7-5ww4","MINI-98mh-g64h-rq75","MINI-9c2q-qfrc-6rq4","MINI-9c7c-rh9c-grf5","MINI-9f6x-39vh-6m93","MINI-9f99-rxq2-cjx5","MINI-9g66-9f78-wj2c","MINI-9gfq-m5gj-wchj","MINI-9h37-v5rw-pfwg","MINI-9h9f-2cmw-fc83","MINI-9hh3-wmm7-pm8r","MINI-9hjx-r79g-vhh2","MINI-9hwh-32pg-f8jh","MINI-9j23-qjxj-v83f","MINI-9j2m-p6rg-rx22","MINI-9j99-55r9-m6p8","MINI-9mwq-4m89-x473","MINI-9r8f-vr2c-w9mj","MINI-9v5w-fpjc-h7v3","MINI-9v84-f4xm-c4h9","MINI-9vfw-2x9v-rvxw","MINI-9vmq-r967-3gff","MINI-9w44-qc9g-p5q3","MINI-9x34-67jf-f5rp","MINI-9xxr-gv67-w33h","MINI-c24f-8jf7-qxm5","MINI-c2j9-j5x5-v54p","MINI-c36x-77r9-jv82","MINI-c377-4j65-hg6m","MINI-c3fx-9m33-gp2j","MINI-c4g3-px7m-rhw2","MINI-c4wv-2hvf-p9q3","MINI-c5cv-5j43-hr4p","MINI-c68p-6m54-3w54","MINI-c7rf-gm9h-gvwq","MINI-c92r-xvc9-8363","MINI-cc9p-w43w-2999","MINI-ccqg-v8g6-f3cx","MINI-cf36-chvw-4pv5","MINI-cgf3-gjfp-q3qw","MINI-cgmh-h438-rg9g","MINI-chp4-r27c-9xrw","MINI-cm66-rjm2-5x37","MINI-cm8j-646x-vff3","MINI-cphm-4jr8-vw89","MINI-cprq-cc8q-xxwq","MINI-cqwc-rj63-g9fg","MINI-cqwp-jgpp-6fmv","MINI-cr3x-c26r-pv79","MINI-crgp-vvcx-p626","MINI-cv76-gchm-x7v8","MINI-cvx9-vxx5-rgxj","MINI-cw97-5c8g-rv5j","MINI-cwch-vq26-h2m2","MINI-cwh8-6fp6-7wh7","MINI-cxc8-96mp-5frf","MINI-f22x-f27r-wvrx","MINI-f4cr-94f8-4c42","MINI-f4wq-x9xq-3x26","MINI-f58v-xw85-qm5f","MINI-f5x9-8p5p-vx62","MINI-f7hj-v79q-gvqc","MINI-f7qh-2xh6-6ppg","MINI-f877-356g-m7q6","MINI-f888-gx8v-rjfw","MINI-f8cm-j33c-pq27","MINI-f8hp-cpjm-qg57","MINI-f8j4-ghp9-mjw7","MINI-f9j8-49qx-fm44","MINI-fcw9-9cg7-4jjm","MINI-ff6r-v792-h492","MINI-fg36-fcrc-59cr","MINI-fg43-6jqp-v2xf","MINI-fg55-629m-j9mc","MINI-fgh4-2hx2-hfcx","MINI-fgpg-2pfj-w2c4","MINI-fgqg-6hfq-f8cx","MINI-fhcq-25gc-hvjr","MINI-fhgg-82wx-m752","MINI-fhx7-9qx4-p362","MINI-fj32-mcpv-5vxv","MINI-fj66-jhpq-582j","MINI-fj6w-9rjj-9hxm","MINI-fj75-6pmq-xhpc","MINI-fjm8-8gxv-mvjr","MINI-fjmg-pcpm-3x42","MINI-fjv2-wx9m-93vv","MINI-fjvh-qqcm-7jm6","MINI-fjwv-p9xp-g8hx","MINI-fm93-cmfh-7qq4","MINI-fp5g-39w5-xw9f","MINI-fpf4-f3c6-42hc","MINI-fq8x-5cxq-9548","MINI-fqfq-43vp-f5ff","MINI-fr9j-hgcw-qrw2","MINI-fv22-c8pp-w97v","MINI-fvww-c77r-rm7w","MINI-fwfj-v7v6-xf8r","MINI-fx7r-wwm4-hp76","MINI-fxwx-94w4-qgfq","MINI-g28m-h663-h4qp","MINI-g44g-66qr-c9rr","MINI-g4xv-98fg-h5f7","MINI-g5hp-hf78-vw4h","MINI-g5wc-qrp7-848w","MINI-g6hx-m7cf-m6c8","MINI-g6j3-m36p-4f4h","MINI-g6m9-3h96-v49c","MINI-g6p4-2w9r-g9m5","MINI-g82q-2x88-x423","MINI-g858-xpq8-fg8w","MINI-g8f5-hjr4-whr9","MINI-g8mh-9hq3-62fq","MINI-g9qm-mm6q-95rm","MINI-g9xw-2mhx-768p","MINI-gf44-4pw2-mqr7","MINI-gfg4-xhmf-7g9j","MINI-gg2w-6wm9-47gg","MINI-gh4c-4h77-8q5p","MINI-gh9x-78m3-xfpc","MINI-ghh6-f3gc-c93h","MINI-ghrg-3cw5-7rc3","MINI-ghwr-2395-q5w7","MINI-gjp3-2mpc-hjrx","MINI-gjvf-935j-wmhx","MINI-gjvp-j856-j652","MINI-gjvw-4rpr-q5fp","MINI-gm28-m8g9-qv78","MINI-gmmc-mjhp-qfjm","MINI-gmpc-3gmq-f8vj","MINI-gmx8-j6gh-jprg","MINI-gp2f-3x6m-672p","MINI-gp5m-7hq2-gwpg","MINI-gqwc-f7vp-wqwm","MINI-grfp-hc7r-36wp","MINI-gvmq-fxvq-5wfg","MINI-gwhj-g59x-fgfp","MINI-gx6r-84wg-5fqv","MINI-gx9v-j5hv-22vm","MINI-gxr4-jv84-hxcg","MINI-gxr4-vwh4-gpg8","MINI-h39r-rjqm-q28m","MINI-h3rm-f3j2-96qh","MINI-h548-3f8j-2gfq","MINI-h599-gchm-c8m8","MINI-h63p-cvjv-5w7h","MINI-h65w-fppp-h496","MINI-h67f-39xr-hqfq","MINI-h69x-j623-3c3q","MINI-h6x4-hx8c-46mj","MINI-h8xv-jr84-r4fp","MINI-h9jf-54mx-m6pq","MINI-h9qm-28w2-vhjq","MINI-hg58-rfp8-v978","MINI-hgq2-mgg2-298h","MINI-hhrh-f76c-5wj3","MINI-hj64-h2w6-6wwm","MINI-hj6v-f9gr-2pxc","MINI-hjw7-8937-vhg6","MINI-hpg5-p4pq-7crc","MINI-hph3-g4cr-9373","MINI-hqgg-655h-9w34","MINI-hqjp-w37j-28fc","MINI-hqmv-vq9f-4954","MINI-hqwc-v47h-7xr5","MINI-hv3f-778v-vc8x","MINI-hv3v-2g2j-8jqq","MINI-hvj5-h4v3-m54v","MINI-hw2h-vhwv-3m2v","MINI-j25m-2mj4-8x2r","MINI-j282-ww79-j82c","MINI-j2f3-3pfg-968p","MINI-j2f7-wggv-7h7c","MINI-j2v3-xq95-7cqg","MINI-j3j4-xw38-3p6j","MINI-j4jm-rr4w-g8r6","MINI-j4rc-r925-4p98","MINI-j4rp-f2xj-xff6","MINI-j5c6-3w84-8mwx","MINI-j5hm-6mxw-cgqm","MINI-j636-jcf9-7hpm","MINI-j6gr-7225-9wfj","MINI-j6hq-4m4f-gjqm","MINI-j6j8-hvxr-c337","MINI-j78m-5m37-rwpw","MINI-j7p5-4jrc-xvcg","MINI-j7w8-2vhr-x559","MINI-j83x-x353-8v7r","MINI-j846-hmg9-ccrp","MINI-j9r5-c8qv-5m53","MINI-j9xp-hvv3-623x","MINI-jc3g-gvm2-m8h5","MINI-jcjr-fvq6-qm5g","MINI-jcm3-r85q-4g8v","MINI-jcmh-2pp4-x79x","MINI-jf2f-qr8f-fw94","MINI-jf5p-rvvc-qxf9","MINI-jfc8-7p92-j9vm","MINI-jfp2-99hf-ch4w","MINI-jgh6-7q27-wx5c","MINI-jgp9-r52j-mq8w","MINI-jhg8-c2jg-f8c6","MINI-jjf4-xhrw-m234","MINI-jmf6-f4rm-j7w6","MINI-jmhm-qmvf-3w85","MINI-jphp-r937-gq42","MINI-jq8p-v52p-8rg9","MINI-jr23-2cqw-c356","MINI-jrqh-xcwh-599f","MINI-jrw4-f6h9-4m42","MINI-jv5f-h7mm-q8cr","MINI-jv8v-p844-xwxp","MINI-jvf5-qrm9-cpw4","MINI-jvq6-p442-xrw9","MINI-jw9p-h6x3-q5fx","MINI-jwq9-rxjf-2mf2","MINI-jx9h-f7q9-qh9r","MINI-jxq2-q7jq-9jf8","MINI-m288-rj34-q92x","MINI-m289-2hm7-6r8m","MINI-m2mv-c876-cp3c","MINI-m2p2-p6x5-jw49","MINI-m39p-f643-c65v","MINI-m3mm-9f47-4m7v","MINI-m3mm-c2m3-hhx5","MINI-m43w-m4mw-jcc2","MINI-m4mg-x5wv-538p","MINI-m55f-hwf5-rw27","MINI-m57c-2q32-j32g","MINI-m5xp-p535-4rfx","MINI-m632-769w-6j8g","MINI-m68r-2cr4-r497","MINI-m6m3-x7vx-cc5r","MINI-m8pp-f32q-9m4p","MINI-m8qj-xhqp-pv8w","MINI-m8rr-jf4v-jx9v","MINI-m99v-5f5h-8483","MINI-m9cg-7wqg-x756","MINI-mchc-gg7w-5q9r","MINI-mcjh-q5j9-59x9","MINI-mf89-rh72-wx23","MINI-mfgv-cx3j-3wmp","MINI-mgch-q25r-xh29","MINI-mh9f-mvvr-wprf","MINI-mjvp-vgpx-xg6r","MINI-mp6m-627h-3q2q","MINI-mp95-3whh-8g9m","MINI-mpw8-3jrw-6c46","MINI-mq67-m7fh-rgqh","MINI-mqjq-j5vx-mr9x","MINI-mqq2-3cgc-g96x","MINI-mr4f-58v5-cr3h","MINI-mv97-79jh-8m9v","MINI-mvcv-mfmg-q847","MINI-mvp5-7ghp-86q8","MINI-mvx2-h79v-6gfw","MINI-mvxv-wxp6-q8rq","MINI-mvxx-8368-p2pf","MINI-mw24-4jr7-w8qm","MINI-mw24-h7r5-vfw5","MINI-mw5w-r789-4f72","MINI-mwg5-j364-jjqc","MINI-mwm6-4w7v-pvv7","MINI-mxg2-xwv4-v7h8","MINI-p3f2-8xmh-px39","MINI-p4gx-g8g4-w23h","MINI-p4h5-vxwm-qqrc","MINI-p4j4-jq8c-g6qp","MINI-p4vr-7jcg-768c","MINI-p6q3-2pf4-xffq","MINI-p6v6-qchm-p7j6","MINI-p72f-5crj-32fw","MINI-p7fr-2j3f-q9mf","MINI-p8m6-w8f5-f97j","MINI-p8qw-568g-rvp7","MINI-pc74-mj93-q6j2","MINI-pc84-5w8q-mx83","MINI-pf2w-w3f2-qjhp","MINI-pf42-6fm7-5cr2","MINI-pfrm-3j3r-c7r4","MINI-pfv8-c7c5-9pf5","MINI-pg4h-3p4v-mvxr","MINI-pg53-5cp4-5wxv","MINI-pg69-ch7r-87qr","MINI-pg7v-57hg-wfwc","MINI-pgjj-mhfp-jp94","MINI-ph5h-rffh-g6gh","MINI-pmjv-x488-vjm8","MINI-pmx9-4r92-vv27","MINI-pq7w-72p8-fvw3","MINI-pqxr-37mj-xq5w","MINI-pr9h-h62j-f8hr","MINI-pwcv-9fxf-m2wc","MINI-pww3-75fp-gr5w","MINI-pwwm-4gvw-x4m7","MINI-pxjw-h297-3c4c","MINI-pxx6-4623-gmc5","MINI-q227-6hp9-6862","MINI-q22p-qw4c-8mp2","MINI-q29g-865j-2vjg","MINI-q38w-mh5r-7h95","MINI-q3cq-6pmg-2jx7","MINI-q48f-j456-wm7h","MINI-q4rr-v2pm-wvpg","MINI-q548-3369-f7cr","MINI-q5pv-ghqv-qr8f","MINI-q5wr-c847-rm6j","MINI-q5xr-rpfj-4gpx","MINI-q624-8frv-w9x5","MINI-q6qv-7xg6-xgc3","MINI-q7f9-w6xx-3xmc","MINI-q7w8-x7gm-8jqm","MINI-q8mv-wcqv-wfmq","MINI-q9cp-5v2c-hvvg","MINI-qc5m-mh45-6p54","MINI-qcgv-xcj6-6h34","MINI-qcmf-5q35-f56w","MINI-qf84-p55h-f3rq","MINI-qfm9-7pqc-hpw5","MINI-qgg7-62xx-whxg","MINI-qhvh-c84j-fgvq","MINI-qjjj-2fgm-m85h","MINI-qm36-g86f-x22w","MINI-qm46-w33v-9fw5","MINI-qmrq-53mm-5mq4","MINI-qp42-27j4-xjf2","MINI-qpf3-m8p2-fr3j","MINI-qqmr-g449-wp2c","MINI-qr39-vqmm-jgg5","MINI-qr6w-gvrj-5xq2","MINI-qrqf-79cp-7f9w","MINI-qv2g-wh92-p8vh","MINI-qvv5-7hqx-h89w","MINI-qw2q-73mv-j8qm","MINI-qw4w-6g76-5v5g","MINI-qx5p-wjm5-j7jh","MINI-qxrq-5f76-gpc6","MINI-r244-hxmx-qp9x","MINI-r3wq-pfqq-g5m9","MINI-r43x-4v37-r73r","MINI-r526-8528-hfmj","MINI-r62v-h99m-x4wh","MINI-r62x-r3jj-j84f","MINI-r8hr-pfv2-p2vc","MINI-r8hw-7ghw-825m","MINI-r924-8xhq-599q","MINI-r977-pv5g-hwc4","MINI-r99g-jhjw-75w5","MINI-rc23-4jpp-qvmm","MINI-rc9h-jf2h-7cv6","MINI-rcgf-9m2c-mwcf","MINI-rcq5-2wpp-cv2w","MINI-rcqr-95gc-rqm8","MINI-rf4j-95mh-qfw6","MINI-rg34-fp4h-9xvf","MINI-rg4f-2j39-4r85","MINI-rh4r-4cg7-rcvq","MINI-rjqr-c2xr-pg7f","MINI-rm4p-64f9-c3qc","MINI-rm56-r9xm-5v86","MINI-rq87-wcj7-3wc3","MINI-rqmc-hgf4-wm6q","MINI-rr5c-rrrh-9r9q","MINI-rrh7-pjq4-phqg","MINI-rrm2-q2gv-c5hr","MINI-rv6j-9rvw-88v5","MINI-rwfc-4r36-m75w","MINI-rwgv-wqvc-7wvw","MINI-rwqw-rr83-8wpg","MINI-rwxr-87r8-7cm9","MINI-rx33-f6cf-7964","MINI-rx6w-m49q-gch5","MINI-v2mx-qj6q-hh6x","MINI-v2pj-8cmf-9f9j","MINI-v2vw-6wf9-wpj4","MINI-v32j-g26g-vrmv","MINI-v43c-7wp4-3cpr","MINI-v45r-j44p-p4mv","MINI-v47p-xf9c-7pfg","MINI-v4g4-fv9r-6352","MINI-v52q-c97j-hhx8","MINI-v5xc-9m69-4p5f","MINI-v67h-p985-qwmq","MINI-v6vm-hqvm-r7x9","MINI-v74m-6phf-hrvq","MINI-v928-gv9r-rqq2","MINI-v92p-8wj3-gfm7","MINI-vf85-8xj7-f325","MINI-vfvq-9wgm-92mf","MINI-vg89-c6jh-w67j","MINI-vgfg-h5pm-hm4r","MINI-vgm9-v2c2-hfv5","MINI-vjg7-x3fx-2mrp","MINI-vm5q-5469-rwvh","MINI-vm7f-pfrc-f6qj","MINI-vm93-rfj3-ggcc","MINI-vp6v-m57h-mgfx","MINI-vp8r-jgmx-f9xm","MINI-vppv-2w9r-r2v6","MINI-vpv2-mvv8-m82x","MINI-vpvj-hqw9-3wcv","MINI-vq9v-5r2h-j434","MINI-vqj2-3hmv-pr6w","MINI-vqjm-mcvw-2rph","MINI-vqw6-495g-ggwh","MINI-vqwq-j8hh-4q37","MINI-vv4w-r286-gp85","MINI-vw74-cvf6-hc4j","MINI-vwmj-hgm9-93p3","MINI-vwp4-8438-jqh2","MINI-vxfv-gj86-cv7v","MINI-vxxq-vg84-5chj","MINI-w232-jvcw-ffp8","MINI-w2gw-hwc8-j5hx","MINI-w2qf-j3hv-rcgr","MINI-w2w3-8692-hv9j","MINI-w39c-gqhm-xq8p","MINI-w3p5-952v-jmvq","MINI-w3vm-26c7-5w63","MINI-w45h-xqpv-vprf","MINI-w49q-pw4v-q7mp","MINI-w4p4-m865-29qj","MINI-w5fx-7fc4-2q6g","MINI-w5fx-xq77-g4v3","MINI-w5gw-qq8x-f859","MINI-w5wq-5j89-92c8","MINI-w666-c52g-xg4f","MINI-w6gp-4hv8-gf99","MINI-w768-gqr6-qc8f","MINI-w944-9p99-3xcr","MINI-w9cf-r5mq-qh7x","MINI-w9m2-9gjf-jc89","MINI-wf2q-8m84-rrhr","MINI-wg88-xg3h-v8cg","MINI-wgpr-xr9c-q62x","MINI-wh78-3jxm-x4mw","MINI-whx3-w76j-f479","MINI-wj22-mwhv-rfxv","MINI-wjfg-j87w-gmr8","MINI-wm5w-7cj5-p58q","MINI-wm8v-c5fw-g98m","MINI-wmgw-4g6x-wxwh","MINI-wpf2-q9v6-2whm","MINI-wpjg-x283-w7j7","MINI-wpvq-3952-q2r7","MINI-wq76-559g-2wcx","MINI-wqf9-3xj6-24rj","MINI-wqvq-w5wr-8qr9","MINI-wr7j-hjwc-gm37","MINI-wrrj-ccxm-579f","MINI-wv94-pprf-g7c5","MINI-wvxj-gqf2-43wr","MINI-wwh8-mhcg-q9cm","MINI-wx69-rjv5-6g46","MINI-wx6v-gcxj-jjwm","MINI-wx74-m695-gfhv","MINI-wx88-pxr5-pvpq","MINI-wxph-3vfv-mm2w","MINI-wxx7-5w38-wh4x","MINI-x345-7qv6-8pj3","MINI-x3jv-4r8p-5r7p","MINI-x3rp-7cg2-cpfq","MINI-x3wm-vgj5-6p6c","MINI-x42h-xq6x-w2pf","MINI-x4jx-mq9v-4jfj","MINI-x6g8-m3qj-24m5","MINI-x6hw-q395-75hm","MINI-x6ww-qf2m-h49q","MINI-x767-rc2r-h655","MINI-x7g7-c6p4-j9h9","MINI-x7vc-hm9c-7hrc","MINI-x8r3-5rr5-wf28","MINI-x99w-8p9j-5x2f","MINI-x9pc-9fxc-897q","MINI-xc2w-36p5-j8m4","MINI-xf68-vq5j-p6xc","MINI-xf92-366x-75ff","MINI-xfc6-p64q-r39f","MINI-xfr8-rrq4-4f25","MINI-xfw7-32w4-x5c9","MINI-xgcq-2xmp-c7mx","MINI-xm22-3g39-3w93","MINI-xm9v-8fmq-76fc","MINI-xmfh-3f6f-8hq3","MINI-xmvw-c6jj-vgpw","MINI-xp55-q9j6-2955","MINI-xp8q-mqq2-7mm4","MINI-xqjh-qc2p-vj96","MINI-xqvg-phg6-4mp3","MINI-xqvj-87g5-cr54","MINI-xr7g-cg49-p2xm","MINI-xrjv-g667-9vmc","MINI-xv4v-qj2h-7mc7","MINI-xw49-vp38-4hhw","MINI-xwwp-gxw6-3fmg","MINI-xwxm-wx62-hg93","RHSA-2026:17713","RHSA-2026:17714","UBUNTU-CVE-2026-42499"],"analysis":{"component_type":"library","fix_type":"upgrade","impacts":["denial_of_service"],"network_reachable":"yes","non_default_config":false,"product_category":"Go standard library","requires_auth":"none","summary":"Attackers can cause denial of service in applications using the Go net/mail package by providing pathological email address inputs.","user_interaction":"not_required","vuln_class":"denial_of_service"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Go","cpe":[{"product":"go","vendor":"golang"}],"cvss":{"score":7.5,"severity":"high","source":"cisa-adp","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"cwes":[{"id":"CWE-1046","name":"Creation of Immutable Text Using String Concatenation"}],"description":"Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.","ecosystems":["Bitnami","Go","Red Hat:hummingbird:1"],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Quadratic string concatenation in consumePhrase in net/mail","id":"CVE-2026-42499","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":"Bitnami","product":"golang:go","products":["golang:go"],"type":"denial_of_service","year":"2026"},"n_packages":14,"n_references":4,"next":{"headline":"Panic when reading out of bound palette index in golang.org/x/image/bmp","id":"CVE-2026-42500"},"packages":[{"ecosystem":"Bitnami","fixed":["1.25.10","1.26.3"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"golang","purl":"pkg:bitnami/golang","source":"BIT-golang-2026-42499"},{"ecosystem":"Go","fixed":["1.25.10","1.26.3"],"introduced":["0","1.26.0-0"],"last_affected":[],"package":"stdlib","purl":"pkg:golang/stdlib","source":"GO-2026-4977"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.25.10-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.25","purl":"pkg:rpm/redhat/golang1.25","source":"RHSA-2026:17713"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.25.10-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.25-bin","purl":"pkg:rpm/redhat/golang1.25-bin","source":"RHSA-2026:17713"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.25.10-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.25-docs","purl":"pkg:rpm/redhat/golang1.25-docs","source":"RHSA-2026:17713"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.25.10-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.25-misc","purl":"pkg:rpm/redhat/golang1.25-misc","source":"RHSA-2026:17713"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.25.10-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.25-src","purl":"pkg:rpm/redhat/golang1.25-src","source":"RHSA-2026:17713"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.25.10-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.25-tests","purl":"pkg:rpm/redhat/golang1.25-tests","source":"RHSA-2026:17713"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.26.3-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.26","purl":"pkg:rpm/redhat/golang1.26","source":"RHSA-2026:17714"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.26.3-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.26-bin","purl":"pkg:rpm/redhat/golang1.26-bin","source":"RHSA-2026:17714"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.26.3-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.26-docs","purl":"pkg:rpm/redhat/golang1.26-docs","source":"RHSA-2026:17714"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.26.3-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.26-misc","purl":"pkg:rpm/redhat/golang1.26-misc","source":"RHSA-2026:17714"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.26.3-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.26-src","purl":"pkg:rpm/redhat/golang1.26-src","source":"RHSA-2026:17714"},{"ecosystem":"Red Hat:hummingbird:1","fixed":["0:1.26.3-2.2.hum1"],"introduced":["0"],"last_affected":[],"package":"golang1.26-tests","purl":"pkg:rpm/redhat/golang1.26-tests","source":"RHSA-2026:17714"}],"prev":{"headline":"Apache Tomcat: WebSocket authentication header exposure","id":"CVE-2026-42498"},"products":["net/mail"],"published":"2026-05-07","related":[{"cvss_score":8.1,"headline":"Microsoft Windows CryptoAPI Spoofing","id":"CVE-2020-0601","kev_date_added":"2021-11-03","published":"2020-01-14"},{"cvss_score":9.8,"headline":"Missing bound checks can lead to memory corruption in safe Go in cmd/compile","id":"CVE-2026-27143","kev_date_added":null,"published":"2026-04-08"},{"cvss_score":9.8,"headline":"Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip","id":"CVE-2024-24790","kev_date_added":null,"published":"2024-06-05"},{"cvss_score":9.8,"headline":"Arbitrary code execution via go.mod toolchain directive in cmd/go","id":"CVE-2023-39320","kev_date_added":null,"published":"2023-09-08"},{"cvss_score":9.8,"headline":"Improper handling of JavaScript whitespace in html/template","id":"CVE-2023-24540","kev_date_added":null,"published":"2023-05-11"},{"cvss_score":9.8,"headline":"Backticks not treated as string delimiters in html/template","id":"CVE-2023-24538","kev_date_added":null,"published":"2023-04-06"},{"cvss_score":9.8,"headline":"Other in go/golang","id":"CVE-2012-2666","kev_date_added":null,"published":"2021-07-09"}],"sources":[{"class":"attribution","licence":"Apache-2.0","name":"Bitnami","prefix":"BIT"},{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"CC BY 4.0","name":"Go Vulnerability Database","prefix":"GO"},{"class":"attribution","licence":"CC BY 4.0","name":"Red Hat","prefix":"RHSA"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"yes","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2026-09-18","vendors":["Go standard library"]},"summary":"Attackers can cause denial of service in applications using the Go net/mail package by providing pathological email address inputs.","url":"https://insights.sbomify.com/CVE-2026-42499/"}