# CVE-2026-42504: Quadratic complexity in WordDecoder.DecodeHeader in mime > Attackers can cause excessive CPU consumption and denial of service by sending maliciously crafted MIME headers to applications using the Go standard library. - **Severity:** High 7.5 (`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`) - **Exploited in the wild:** Not known - **Login needed:** Not needed - **Attackable:** Over the internet - **Victim action needed:** Not needed - **Fix available:** Yes - **Published:** 2 Jun 2026 - **Updated:** 29 Oct 2026 - **Also known as:** AZL-89360, AZL-89366, AZL-98718, BELL-CVE-2026-42504, BIT-golang-2026-42504, CLEANSTART-2026-EL32711, CLEANSTART-2026-ES62774, CLEANSTART-2026-HQ29717, CLEANSTART-2026-JL31783, CLEANSTART-2026-KJ35426, CLEANSTART-2026-MR47153, CLEANSTART-2026-NB79781, CLEANSTART-2026-NF46642, CLEANSTART-2026-PB12470, CLEANSTART-2026-RE57031, CLEANSTART-2026-UD61753, CLEANSTART-2026-UK17793, CLSA-2026-1789578681, CLSA-2026-1789647110, CLSA-2026-1789780319, CLSA-2026-1790065054, CLSA-2026-1790156031, CLSA-2026-1790163949, DEBIAN-CVE-2026-42504, ECHO-fdde-76cb-40ff, GHSA-h524-452v-82p9, GO-2026-5038, MINI-225g-4gjw-v5xp, MINI-2282-q485-8h3q, MINI-23w9-5pgh-mcm9, MINI-24p8-vc9q-5vpm, MINI-24wc-vwp5-2g57, MINI-256q-48q9-77jf, MINI-256q-q74q-f7rx, MINI-26v5-8m6q-8jqp, MINI-27fp-68r2-3w27, MINI-27h4-qw9c-p2qp, MINI-2827-82qg-7rx5, MINI-2857-vgwm-vmxh, MINI-2867-mq85-f2x5, MINI-28h2-qq65-hrvc, MINI-29g3-85mr-6j22, MINI-29h7-g9wc-8xx7, MINI-29mp-mc2j-mg4m, MINI-2c3j-x284-qqj7, MINI-2c8f-qq63-5pf8, MINI-2f44-x4x8-496p, MINI-2fr2-c3gq-g6xr, MINI-2g6j-q8hr-wjqg, MINI-2hjm-q63w-rvqp, MINI-2j9q-vj67-qm5h, MINI-2jm7-jhxj-5h2g, MINI-2jqg-p985-5p6c, MINI-2jwc-h6v9-26cw, MINI-2m35-hxrh-m635, MINI-2mpp-hchp-q956, MINI-2q92-9mc9-6rj4, MINI-2q97-frvm-64jr, MINI-2qrx-86gq-9xcw, MINI-2qx4-jv9v-q2ph, MINI-2r98-wjrp-7v8w, MINI-2rcr-2c75-7vp8, MINI-2rgv-8822-444m, MINI-2rgw-7h2g-j5c9, MINI-2rh9-66m7-xr7h, MINI-2rrm-vrfp-r8j6, MINI-2rw5-7j2g-hpq6, MINI-2vh2-v328-fpgj, MINI-2vpf-5qh5-gmjx, MINI-2x7c-fx43-pjgr, MINI-2xpc-xxvm-q8vf, MINI-34ch-gvrf-v4cm, MINI-34q2-hxgx-cpcf, MINI-357f-3cx5-p4m4, MINI-35c8-qvpq-9386, MINI-35hh-xhcx-f43f, MINI-365x-2cxv-f96g, MINI-36f3-rx9g-wvmv, MINI-36gw-3r56-8r25, MINI-36hf-9f7v-qwwh, MINI-36rj-jr4v-68ch, MINI-372w-2hv7-3744, MINI-377j-hgx6-wr3q, MINI-389p-7jp6-8cww, MINI-38vw-87mr-m8m6, MINI-38wr-v4fr-w8gp, MINI-395p-v4vw-34j8, MINI-3c2v-93wh-gpmf, MINI-3c9r-8cx6-vm54, MINI-3cgx-q525-gj32, MINI-3cmp-jh69-2c6j, MINI-3g33-qrhj-w5gw, MINI-3g5x-cmfw-79pc, MINI-3g9g-7x8g-34gh, MINI-3ggf-gq2w-657x, MINI-3h34-wqwh-7w6w, MINI-3hqf-46rv-263q, MINI-3m35-33cf-m6cg, MINI-3p7j-vg45-qr63, MINI-3p92-5p73-7v72, MINI-3q9p-r54h-c32q, MINI-3qfm-87x5-6rgr, MINI-3qj7-585g-3r46, MINI-3qm7-3443-cr3c, MINI-3rqw-jvqm-58p7, MINI-3v6f-vr2w-4cj8, MINI-3vc4-jx5g-cqp7, MINI-3vgq-gjqp-p539, MINI-3vrw-33g9-59wg, MINI-3vxg-xrm9-wm2w, MINI-3wh3-fr5j-7hrw, MINI-3wj2-cqvw-2hmp, MINI-3wpj-pmq5-4xxc, MINI-3wq4-qqmm-jwc9, MINI-3wv6-h42v-62g7, MINI-3wwf-xrx4-25wh, MINI-3x8j-w76w-x8j3, MINI-426v-7vxc-86p9, MINI-42h2-29f3-w2m3, MINI-437g-5353-jq2r, MINI-4395-hmgw-wvh9, MINI-439p-424m-h8g7, MINI-44jg-8rww-cm64, MINI-44v5-4hgv-w5jx, MINI-45h6-qr3j-mc4g, MINI-45hj-pmgv-cxhf, MINI-45jj-cpcw-2cq7, MINI-45pq-gm82-mf5m, MINI-4638-m334-pc4q, MINI-46jh-3xjp-7rj3, MINI-46rh-527w-95v3, MINI-47q3-36c8-m3j7, MINI-487m-5xf6-hwjc, MINI-48ww-2663-p9fg, MINI-49j6-x74c-g6p4, MINI-49rr-9fgw-622p, MINI-49xw-grjv-8gpc, MINI-4c26-p2cr-vcqh, MINI-4ff5-fcf5-qfjx, MINI-4fv6-wf2f-h39v, MINI-4g39-742c-v8vr, MINI-4gfq-99x9-8v36, MINI-4h33-w2p2-w3rg, MINI-4hc4-mxhv-2h9r, MINI-4j48-xw87-2vfg, MINI-4j7c-pcxr-6cmq, MINI-4jcg-fqfh-f6pf, MINI-4jcx-p34w-99m7, MINI-4m3m-492r-xvr3, MINI-4m7f-qm33-6mxv, MINI-4mf4-hx6v-mvhj, MINI-4pv9-x4x5-g2j6, MINI-4q3j-5vmw-24v9, MINI-4r4f-h2v7-8c7f, MINI-4r73-cgvp-p8pv, MINI-4rj7-vcg2-3vpg, MINI-4v48-gj47-fg4c, MINI-4v77-8j53-vv2j, MINI-4vhm-4qv3-q4h2, MINI-4vjj-358m-44gc, MINI-4xr4-7xgh-q925, MINI-526q-5phr-8x39, MINI-52hp-jf83-6346, MINI-52q2-4xvv-qxfh, MINI-52rv-chqw-hc4r, MINI-5333-27c4-p8c4, MINI-535v-ch3r-qxv8, MINI-53ff-r7vq-8xmx, MINI-53rr-rxgf-g8h7, MINI-53vc-xw9j-rp52, MINI-5487-mhp6-hjr9, MINI-5577-x6jw-j2hg, MINI-55gh-4vmf-3wg9, MINI-56w7-8p4x-w38p, MINI-5847-284p-38vg, MINI-5847-3mvw-4x54, MINI-5895-45jc-jv3f, MINI-58mj-7rxm-5985, MINI-58vr-cv9m-h2xr, MINI-595q-3rw3-p276, MINI-5cgc-3g7p-qc3w, MINI-5cj6-48fv-vqr9, MINI-5cq4-gp45-w86v, MINI-5f49-m9pw-6vh7, MINI-5f7x-grrv-6vvh, MINI-5g7j-4xxc-72cr, MINI-5gvv-54hw-92xm, MINI-5gx7-hc3h-c3jq, MINI-5hjc-3vqv-rhq7, MINI-5hrh-v7m6-r253, MINI-5j49-fr3g-3hxx, MINI-5j9g-88w9-jx2q, MINI-5jwm-pxjf-p87g, MINI-5mxg-h6rc-4wfj, MINI-5p52-9fgx-pj72, MINI-5pqw-c37w-g587, MINI-5pw5-65vg-qwj5, MINI-5q2f-28gw-vw65, MINI-5r4v-7q8w-53c6, MINI-5rgw-j9rq-qvrq, MINI-5rwg-9cmj-xcqf, MINI-5vpf-9rp5-9qwf, MINI-5vvr-8h5f-h3h6, MINI-5vxp-2w9h-mxpx, MINI-5w7h-rjhg-gjfp, MINI-62x8-vww5-wqxv, MINI-63q9-h6mc-pxvq, MINI-63wf-c6hw-3r44, MINI-63wq-fgw9-3q9w, MINI-6472-cxm2-wvfc, MINI-6478-85c6-55wq, MINI-65fx-jwx4-h467, MINI-65r7-54mp-jw55, MINI-66fg-wgqq-j4wp, MINI-66gh-p8c5-43xq, MINI-66h7-x5g5-q536, MINI-66hq-69mc-5mm2, MINI-66pc-3xcc-2xfq, MINI-66xm-569p-j7m2, MINI-675v-4vp4-82pg, MINI-676p-w7px-v532, MINI-67g9-jpv4-4vp8, MINI-67hm-pm29-g4gr, MINI-687x-r39q-8769, MINI-698h-v24w-6vfw, MINI-69hj-v476-h99r, MINI-69mv-859v-3wpm, MINI-6cp4-3qgr-9wr8, MINI-6cx8-5rp4-h5v5, MINI-6f9j-xrp3-r98x, MINI-6fc6-xr54-xw9j, MINI-6fm9-fpxj-8h53, MINI-6g69-qw64-67jr, MINI-6g86-4ppr-23w2, MINI-6g9w-4p7c-wxg4, MINI-6h44-p73m-33h3, MINI-6h7x-cxmw-jvfx, MINI-6h96-9342-9wch, MINI-6jp7-5jg7-ww8m, MINI-6jwh-4c64-8mh6, MINI-6mrm-9f4c-w4h7, MINI-6p7v-3cg5-7jj7, MINI-6pmp-j5ph-vcrw, MINI-6pw2-6pwg-rvcw, MINI-6qc6-wg79-p396, MINI-6r38-9pjr-p3h8, MINI-6r5p-3chv-gjh4, MINI-6r73-66h3-j27w, MINI-6rfq-9f4x-9r2c, MINI-6rr2-h9x8-jg2f, MINI-6v3x-pcp5-f9wg, MINI-6vfh-v545-8m4p, MINI-6vjq-3x44-gj36, MINI-6vwf-m56p-c8r7, MINI-6vwf-q459-7v37, MINI-6wcq-389r-5fvc, MINI-6wf8-x64m-q2px, MINI-6xw9-v352-5289, MINI-7242-7wmw-9mxm, MINI-728g-whpj-fwp2, MINI-73rg-wrj9-xj43, MINI-74g2-hh5g-vhch, MINI-75m9-w2fr-xjmm, MINI-7696-q6r8-c5mr, MINI-76cr-jxxm-3gxw, MINI-76gr-h9pf-7ch2, MINI-76x9-6f95-69xw, MINI-7729-pjqg-qj8x, MINI-777g-q942-hvq7, MINI-77fq-fgpg-j2w8, MINI-7993-hmg4-4j6x, MINI-7c9j-f32g-pj2h, MINI-7cxw-9mmf-xmx8, MINI-7f5j-vr83-w5q7, MINI-7f7j-q8g2-7p73, MINI-7g6c-q9w3-8hh2, MINI-7ghf-6qrq-v48g, MINI-7hqh-vw98-wh29, MINI-7j37-rfgr-6f2h, MINI-7j3p-3236-pgc9, MINI-7j5p-qg73-6qw4, MINI-7jcw-qqpm-3hvq, MINI-7m33-8cfg-55g2, MINI-7p32-c92c-jhjc, MINI-7p5m-fjj9-q694, MINI-7pgc-qvp7-8hvf, MINI-7pmx-qf3j-5x79, MINI-7q36-mf6x-677j, MINI-7qq3-ppvf-q794, MINI-7r96-73qf-rv3c, MINI-7rq4-4xc6-739m, MINI-7v7q-4rm9-xvfj, MINI-7vh4-q2rw-37w8, MINI-7vqc-wpjf-vwq8, MINI-7vqf-hgxq-645m, MINI-7vwx-4726-vwfc, MINI-7wqf-m9g3-5vmr, MINI-7x47-vrmg-fp59, MINI-7x86-q68r-xq3r, MINI-8277-xpg2-582x, MINI-82h2-q6hx-g7qw, MINI-82x6-7w3g-x6cc, MINI-82x8-773p-5wpq, MINI-83mf-x7ch-8v9h, MINI-83pq-4329-x5qq, MINI-83vh-mfpp-j6fv, MINI-83xg-3f33-f7f6, MINI-849c-xw9w-gv73, MINI-84cc-mgx4-pmfp, MINI-84pg-7r7q-5r9h, MINI-84rm-xqv9-2gmv, MINI-85rc-m7w9-xjmg, MINI-8683-25r6-gv5r, MINI-86gm-5xj4-27qg, MINI-86q7-42gx-66j6, MINI-86vh-qfvj-6w9v, MINI-873c-22wc-635j, MINI-87mf-m5mj-3q9h, MINI-886w-v28c-xp2x, MINI-8883-jvx2-pjv8, MINI-88f9-7c4g-qgwg, MINI-89fh-wv3m-3cqr, MINI-8c62-v3v5-7j9f, MINI-8c83-hr79-xf92, MINI-8chq-86qq-v44j, MINI-8cm6-wm33-pfp3, MINI-8crv-rwhc-85gf, MINI-8fwh-hf73-vm6g, MINI-8g84-qwhq-pvvf, MINI-8h9c-896q-2qcg, MINI-8hg4-h44f-v729, MINI-8hgc-94qx-qmx7, MINI-8hj4-72m4-g68j, MINI-8j2m-wvmr-6j46, MINI-8jcp-rh3h-3fq7, MINI-8jwc-7x2j-466w, MINI-8m92-86g2-g294, MINI-8mfv-6q6w-pj4j, MINI-8mgx-6c95-g4q7, MINI-8p3c-4qpq-m3xf, MINI-8p54-6ph6-5942, MINI-8pf3-rq24-w462, MINI-8pfp-669g-cw24, MINI-8ppg-jcv3-36pw, MINI-8qg8-r5v8-c49m, MINI-8qqf-q886-7xpx, MINI-8qwp-wqjh-j42v, MINI-8r6c-3g46-qrwx, MINI-8v46-r5mh-7jc7, MINI-8v9x-vm4h-mxwj, MINI-8x28-5wgm-q4mj, MINI-8x28-qxw2-x343, MINI-8x7p-c9xv-3259, MINI-8xcc-2jhp-9cp3, MINI-8xm6-4hpg-ppcp, MINI-92p5-78m4-684j, MINI-933h-vw7f-cr8f, MINI-933p-jmhc-3227, MINI-93fg-xcvw-38wx, MINI-93mf-5r9x-pgrm, MINI-93pf-9m9j-7pvj, MINI-9423-3jwv-34w7, MINI-94mx-8392-j4fm, MINI-94qf-g7ch-rrjc, MINI-958r-254p-rgmw, MINI-965p-q4q5-4556, MINI-96gf-6r42-wcvc, MINI-9735-4773-2vwc, MINI-97x2-r69q-5q57, MINI-9832-vffh-x6m5, MINI-98f4-534q-8628, MINI-98gf-j6jc-qv6f, MINI-9922-f6f6-x6mw, MINI-99r3-rhmq-g833, MINI-99vq-4f5h-q2c5, MINI-9c2q-7v39-296r, MINI-9c36-jgj8-8r65, MINI-9c4c-jhgg-cwxm, MINI-9fcw-v5rc-c2mf, MINI-9fm2-p36v-34cw, MINI-9fq6-vxw4-qj2q, MINI-9gw5-hpc9-gjqg, MINI-9hh8-c72p-2r6r, MINI-9j74-f979-x22m, MINI-9jwj-hx63-3257, MINI-9mf2-mr2p-6ppp, MINI-9mgx-3v5x-5c4m, MINI-9p4m-679j-prr9, MINI-9p5f-84p4-3453, MINI-9pmw-hvxq-xgj6, MINI-9q36-3m65-4qf7, MINI-9q9r-3r2x-xpmp, MINI-9qgm-mrp6-prwq, MINI-9r42-ph7c-qw63, MINI-9r8q-c8q3-p8j8, MINI-9v6m-73hc-mpx7, MINI-9vr7-8935-xqcp, MINI-9vwc-cv9w-8v24, MINI-9w3w-2fmv-523r, MINI-9wf6-x75g-6cw6, MINI-9wfc-g6rr-p6gg, MINI-9wgh-cw27-28wq, MINI-9wp9-37pw-26f2, MINI-9x28-cr72-rgqp, MINI-9x4h-9hvw-mhfp, MINI-9xcf-3mgw-pvfx, MINI-c24j-gcw9-xhpj, MINI-c2fq-wqcx-wc5v, MINI-c3g9-8f4j-8g7c, MINI-c3xq-7m38-72fw, MINI-c4fg-6mw2-63j7, MINI-c4mm-rcqv-h8j6, MINI-c4v9-f4wq-69p5, MINI-c5pw-q5pc-r78r, MINI-c69m-q45m-gpvx, MINI-c7m7-8x4v-4h33, MINI-c7w9-273h-c45x, MINI-c84w-h54m-vpp9, MINI-c89f-vpr7-8gwg, MINI-c97h-9263-h2v9, MINI-c9hp-5fm8-c3r2, MINI-c9qg-78q2-mfh7, MINI-c9x5-298g-93qh, MINI-cc3f-rvrq-9g9x, MINI-ccc3-6v6c-q895, MINI-cf4g-37rm-rgfc, MINI-cfch-247m-j94j, MINI-cfcj-hp7p-qjp8, MINI-cfq4-3428-4m5v, MINI-cgcm-hrgh-w36j, MINI-cgx5-98r5-hfwh, MINI-cgx9-8vv5-4q3x, MINI-ch75-9cv7-gh64, MINI-ch7r-9fhv-7c87, MINI-chj2-5g8q-5jcq, MINI-chqc-95vc-4354, MINI-cjh5-vc3x-3j57, MINI-cm6r-xwj6-rvrh, MINI-cmrr-cfj9-v2gm, MINI-cp35-x2xp-jxjv, MINI-cp3p-w3f8-jrjw, MINI-cpvx-8w27-h539, MINI-cq24-hcwg-9fmf, MINI-cqh2-mjf2-xxcp, MINI-cqrp-2c23-6jc7, MINI-crgx-vwvg-qfwf, MINI-crjg-76fg-v5xx, MINI-crm2-93g3-5cvm, MINI-crqv-rvh6-pphq, MINI-cv5g-wvfp-g6x8, MINI-cvc9-2x3c-75f7, MINI-cvpq-5j9r-rcmj, MINI-cw88-wv7g-r94w, MINI-cwf6-m92x-r5j9, MINI-cxq4-rj8q-rp59, MINI-f26q-mj5r-v4xx, MINI-f2fj-hcfg-wvwm, MINI-f2h5-jvq9-q7pq, MINI-f2w7-59vv-5329, MINI-f34c-7xvp-23pr, MINI-f3jg-jjrg-mr6w, MINI-f3pw-mj25-rm5v, MINI-f3ww-hh5w-mq7r, MINI-f4r9-pj43-mx98, MINI-f4xx-xphm-3v6r, MINI-f5xv-8cqh-67pm, MINI-f66v-h2j6-cjwf, MINI-f6xc-wchm-c4w7, MINI-f775-r4ff-29w8, MINI-f7m7-8fmr-38r5, MINI-f863-mw6x-h3mg, MINI-f8rj-52q4-v3fx, MINI-f9cw-5fr8-x6x3, MINI-f9fv-g66q-j5vq, MINI-f9hh-gxxv-2g7p, MINI-fcfj-vhj8-pf7p, MINI-fcpm-22j7-p689, MINI-ff2r-9qfq-948f, MINI-fg37-4997-49qq, MINI-fg5w-2qgh-9r48, MINI-fgmw-hv49-wh9f, MINI-fh3q-9j79-r6pg, MINI-fh49-83wg-r6f6, MINI-fh57-pjg5-m92r, MINI-fhfq-656f-6rhw, MINI-fhvf-76cw-4xx5, MINI-fj7h-qwjf-7288, MINI-fjj8-9q8g-7wqc, MINI-fjx2-vx6p-h7pq, MINI-fm7v-7q5v-j5xg, MINI-fm8h-ffrw-292j, MINI-fmmj-wh89-385w, MINI-fmpx-v2gg-p6xm, MINI-fmxg-pcqg-vq4f, MINI-fp2h-3vw8-j8qq, MINI-fpg5-wfqg-4542, MINI-fq2x-fwr4-r9cx, MINI-fqwv-vhm5-g54g, MINI-fr73-ccp9-8g9p, MINI-frfm-q83f-rhww, MINI-frg5-fh38-4fxq, MINI-frjp-3pr7-vxfp, MINI-fvmv-9wx4-f8j2, MINI-fw3v-rh6m-8wxj, MINI-fwx5-9h2c-r543, MINI-fx48-wjf3-x54x, MINI-fx8g-pmp3-82h8, MINI-fxcp-97mv-gh2f, MINI-g2c6-2mvf-vmmp, MINI-g3c9-vp24-pf82, MINI-g3gh-m558-v7fj, MINI-g3jv-5793-5ffc, MINI-g5rg-f8g7-qm3f, MINI-g6xx-79g4-pqqq, MINI-g76h-j3xj-w753, MINI-g78f-qjr9-v8g4, MINI-g7hm-5jv9-5gcm, MINI-g7m3-wf28-ccj3, MINI-g7qh-76h9-6v42, MINI-g7xg-j266-vfxp, MINI-g89j-5cgm-45cr, MINI-g8cm-4w9g-x88g, MINI-g8r2-3c8r-x6jm, MINI-g9fr-4qq3-x2v3, MINI-g9m3-88w6-mm94, MINI-gc3p-pmqm-wqvg, MINI-gc66-mhj9-xm92, MINI-gcj3-w6cc-7r36, MINI-gf6w-8p23-xx3w, MINI-gf85-3gjv-7jx6, MINI-gf8m-h2jx-jw5p, MINI-gfhw-97w8-wfw9, MINI-ggjr-9j2g-rw5h, MINI-ggrr-4fcx-7mw8, MINI-ghg6-5hh8-7hvh, MINI-gj23-p8rx-7qh8, MINI-gj3w-m75v-739w, MINI-gm22-r7rw-62qr, MINI-gm6w-m5r7-mrm2, MINI-gmw9-3p5m-hm85, MINI-gmxc-xrvx-m62w, MINI-gp2q-5w73-2m57, MINI-gp57-h7f6-r3pc, MINI-gqj9-c7g5-x9cg, MINI-grhh-663w-rfwv, MINI-grjq-333j-pwg9, MINI-grmp-729p-v7m9, MINI-grwq-73jq-43f5, MINI-gvc5-3hqv-23wv, MINI-gw45-cchv-6489, MINI-gwmc-rc8r-r643, MINI-gx28-mc3w-xxq5, MINI-gx6x-wjqv-97xc, MINI-gx87-4c2x-cg5x, MINI-h244-6qj7-gf4j, MINI-h32g-8grr-gvj3, MINI-h398-q2qq-g4cm, MINI-h3f2-qvvv-8r8h, MINI-h3mq-8w78-69qv, MINI-h4fp-5x92-xc54, MINI-h4p3-j7h6-h488, MINI-h4v8-c529-3g88, MINI-h5jm-c98v-mjpg, MINI-h5r2-939p-g8f3, MINI-h6r6-f625-g527, MINI-h79p-q7mh-7rw5, MINI-h8q8-r2mj-rv4x, MINI-h95j-2j25-jh69, MINI-h9r5-5rjf-x9g3, MINI-hc94-vm35-77jh, MINI-hcv9-cx46-x968, MINI-hcvr-rfv5-xfrv, MINI-hcww-h6hf-rf8w, MINI-hfp9-gh3g-m4mp, MINI-hh63-6mh9-f4x5, MINI-hhc5-ghrr-rpvg, MINI-hj4w-r5xr-gvfj, MINI-hj9f-9gvq-mjp7, MINI-hjpx-vwjf-gjgj, MINI-hmj3-3h33-wqc5, MINI-hmr5-v5c8-5fmh, MINI-hpm9-2c28-2qw2, MINI-hq4r-gqw4-fc5c, MINI-hqm3-m96c-f3hj, MINI-hr4c-w25f-9xgv, MINI-hrrr-4jx9-w7x3, MINI-hv2v-8xjv-fg2r, MINI-hvj8-7xff-456q, MINI-hvmc-xpc5-r47g, MINI-hvq2-w86f-3xcf, MINI-hvq5-64g5-w5gx, MINI-hx6x-jhrw-r744, MINI-hx7g-f6gp-r4r8, MINI-hxf4-q6rf-c8qr, MINI-hxqr-2743-w74q, MINI-j238-fq38-wfwp, MINI-j2mg-85jq-5rcc, MINI-j347-55p2-wxwc, MINI-j3c5-rw7p-rw45, MINI-j3gh-wfj8-v2hh, MINI-j3mc-63c8-p4jr, MINI-j3qm-6457-6xr8, MINI-j3v7-46f9-rww6, MINI-j3x7-3gvc-p98g, MINI-j596-j3c3-89rh, MINI-j5cm-xvpj-fq64, MINI-j5g9-cp5j-gp53, MINI-j6wv-f9ph-766x, MINI-j74p-577c-mjwf, MINI-j756-rp46-xmfq, MINI-j7pr-4623-fxv7, MINI-j7vv-vhpx-296f, MINI-j8f4-5gqh-vp6g, MINI-j8qj-xhh4-c34q, MINI-j8wq-34fr-3xwq, MINI-j97x-q8cv-q9w4, MINI-j9hr-h3r4-63c7, MINI-jc3q-5396-27pv, MINI-jfr6-465g-x6w5, MINI-jfwf-f742-4pv8, MINI-jg67-pw5w-6v9x, MINI-jg87-cwfh-crvv, MINI-jm72-4j65-v5fj, MINI-jp28-3pr8-x32j, MINI-jp9w-fg95-f7c3, MINI-jpjh-fr7v-q7mj, MINI-jpjv-fmf3-94m5, MINI-jpmc-4r66-39wf, MINI-jpvq-rrx4-rhvf, MINI-jpx4-php9-g6pf, MINI-jq8g-65x4-j799, MINI-jqhh-xwqh-r657, MINI-jqq2-hfh4-vw2m, MINI-jqqx-6mqv-jp3p, MINI-jr3h-qr8j-37x7, MINI-jrxp-83w6-jg73, MINI-jv87-r2mc-8g47, MINI-jvxx-6hqj-327h, MINI-jwrw-gqwp-6vrp, MINI-jx39-r7vf-vw3w, MINI-jxq9-x6mh-8f6x, MINI-m247-54hr-3j8f, MINI-m25w-2p63-x8g8, MINI-m2pj-h555-gj78, MINI-m2x8-px3w-4vc7, MINI-m3f4-9w6j-f759, MINI-m3qp-42hf-79jp, MINI-m475-qwqf-xp95, MINI-m5gw-5vv6-hqfj, MINI-m5jv-pc2c-xqgh, MINI-m6g2-xj6m-9fmg, MINI-m6jc-xg6g-8r3w, MINI-m79v-xj6v-jff2, MINI-m7cg-m756-9r2f, MINI-m836-84v7-vx3h, MINI-m8w5-49j9-m4q3, MINI-m94g-h6pr-7ffj, MINI-m959-ggwp-2fv3, MINI-m984-xg24-9xhp, MINI-m9f3-vg5v-787c, MINI-m9wc-28cj-hpr4, MINI-mc5q-2hf8-j8c2, MINI-mc9j-x3m9-mwjv, MINI-mcf7-67g3-qwr9, MINI-mf5w-49fj-mhfm, MINI-mf6c-q3q9-xhj4, MINI-mh4x-pj7h-r9qr, MINI-mh8r-qg9q-m8h7, MINI-mhgq-6pf7-88gq, MINI-mhr9-j8rj-p4w9, MINI-mjx6-rhw2-v77j, MINI-mmhh-72jw-286c, MINI-mmxf-fmhw-6p5w, MINI-mpmr-4fx9-pgcx, MINI-mpwr-pjrr-w896, MINI-mq48-6p8v-3gg5, MINI-mq5x-mvw2-c8m9, MINI-mr74-9w48-2cv4, MINI-mr8q-c528-9mvj, MINI-mr9v-7jpm-fxxq, MINI-mrcw-2f7f-5jm6, MINI-mrhv-jcc9-86cx, MINI-mrj9-vwjx-cp9f, MINI-mrjv-r9mj-jvcq, MINI-mrmj-3grj-x938, MINI-mrpm-84m6-243f, MINI-mv5c-mg4x-348v, MINI-mv72-jf67-4gxx, MINI-mv9p-qm8f-8228, MINI-mvc7-46g5-gw9r, MINI-mvcm-6qhg-hhfw, MINI-mvf6-gxw9-x4x4, MINI-mwq4-3285-r3xm, MINI-mwxj-crr9-2j65, MINI-mxh4-gv24-c8jq, MINI-mxmf-j62q-vw44, MINI-mxpq-p77m-884c, MINI-p27r-vrp2-m5rr, MINI-p2c5-q969-pq32, MINI-p358-cqpw-2f47, MINI-p3cf-v8m4-5qv7, MINI-p42m-mrj8-pcm5, MINI-p449-wg98-4mm9, MINI-p47c-4xgq-2473, MINI-p48g-q357-m8q9, MINI-p4hf-w4wr-jxmv, MINI-p4j8-7j8p-m29m, MINI-p4wh-7hcr-5w5v, MINI-p4wm-8px7-mf53, MINI-p545-2wpc-j3cg, MINI-p57j-cc4x-9v34, MINI-p5m9-qjmq-8hhj, MINI-p68v-96qh-6g58, MINI-p6g5-c562-97pw, MINI-p6v5-883h-qg6h, MINI-p79m-xjgf-2gqp, MINI-p7jx-mj3w-6fph, MINI-p7pm-hh5h-p3wx, MINI-p8mr-g7mw-pvgm, MINI-p9c2-93vq-c6px, MINI-pc3c-m448-88cw, MINI-pcm8-mhc6-345g, MINI-pcp5-9gr2-wj29, MINI-pfp8-q996-h5wf, MINI-pfvh-qff3-g28h, MINI-pg77-rxcp-mfhw, MINI-pgfq-7rp5-6gp8, MINI-pgfr-2f56-x26x, MINI-pgpq-6v6f-6f6r, MINI-phgx-gwpq-72wc, MINI-phxh-w874-7fh7, MINI-pj9x-r3v8-qvqq, MINI-pm27-v8xv-8f3p, MINI-pmj9-wfp7-f8m9, MINI-pp2p-xv4x-429f, MINI-pp6g-j73x-pvx6, MINI-ppj3-h6r9-c9g2, MINI-pppp-p879-cj36, MINI-ppv6-jj98-mprw, MINI-pq3g-5mgc-v4c4, MINI-pq72-3m3r-hrqc, MINI-pq99-jcp8-xf98, MINI-pqww-cmrf-2wr8, MINI-pr2h-79cv-w3rv, MINI-prfr-828r-h2pr, MINI-prpw-2v34-gggg, MINI-prw7-j5vv-m858, MINI-pv5f-pcwq-xq8x, MINI-pvcq-m36v-4gq6, MINI-pw3p-v6h4-hwg6, MINI-pw6f-9crv-3575, MINI-pwvg-rg9h-qwwm, MINI-px6m-p7x2-mvj3, MINI-pxh3-qfjp-5g5r, MINI-q2hc-7p62-2qx9, MINI-q3g8-3485-j6h8, MINI-q3r8-fj79-wrr8, MINI-q49w-hmcf-h5v9, MINI-q4v3-x322-jgxv, MINI-q4wv-wwwh-299m, MINI-q524-f38v-x442, MINI-q59w-gc3v-3xg5, MINI-q5hp-64rq-g8wq, MINI-q5pm-3c67-4c7h, MINI-q6q2-89hm-5h4x, MINI-q76q-h4wj-mwcr, MINI-q7gj-2x85-8xf8, MINI-q7x7-c83c-5w4v, MINI-q8gp-rhqw-h26q, MINI-q8rf-jjx2-4jmg, MINI-q8v4-8v6h-vmj6, MINI-q932-7gg7-4f6v, MINI-q9vr-67pc-9cfw, MINI-qc87-ghhm-43pr, MINI-qcm3-54v3-x3jp, MINI-qg2m-j9xj-8992, MINI-qgfr-j9g6-3hqg, MINI-qggq-7q7w-6xmf, MINI-qgxf-68mp-j2g6, MINI-qhwx-cphp-rwh4, MINI-qm5v-r2v3-pxm6, MINI-qmhm-wr6r-xqm6, MINI-qmj3-62rh-jp72, MINI-qmrg-2c88-23hj, MINI-qq8j-g72v-vvr7, MINI-qr7c-r74h-rhfp, MINI-qrmc-hjxc-7c7p, MINI-qrqh-96g3-rc3j, MINI-qv66-8r8w-ff4f, MINI-qv7j-vcmf-c9pr, MINI-qvcp-654g-chh7, MINI-qvg6-v28g-hq3c, MINI-qw8c-8x8x-23pm, MINI-qwm2-969x-9m3f, MINI-qwqw-9x3c-3937, MINI-qxm4-xqhq-x293, MINI-r225-qfq5-46jh, MINI-r4f7-2mvr-frr9, MINI-r4qc-669p-m84c, MINI-r5jg-625j-68mc, MINI-r5p5-32vh-9394, MINI-r5xc-3f39-42xq, MINI-r65q-mhv8-cm5x, MINI-r682-923x-w2ff, MINI-r694-m576-675c, MINI-r6j4-g84c-5xxj, MINI-r76p-g865-6jrq, MINI-r7q3-5hch-ccj9, MINI-r8f5-hv69-925r, MINI-r8pv-7652-ch6v, MINI-r8xh-3r6f-hx3x, MINI-r993-hr24-h64r, MINI-r9hc-g5hq-pgx3, MINI-rc8w-7g33-v623, MINI-rcmp-q8gj-r7q4, MINI-rfqp-565m-p72g, MINI-rgx2-jhr6-8f2c, MINI-rhrc-mch9-369r, MINI-rjj3-27v4-xq8w, MINI-rjpg-v833-8crp, MINI-rm64-2233-jp6p, MINI-rm6m-c3vv-rp6h, MINI-rmf5-5fhp-gwgh, MINI-rmhv-gf6w-3w8j, MINI-rmwv-fmf7-vfmp, MINI-rp49-5xch-cmgx, MINI-rpg9-wrxc-j439, MINI-rq2j-753m-g6v3, MINI-rq7p-jq9c-hf47, MINI-rqfv-mcr7-8hrv, MINI-rr29-5x46-qc7p, MINI-rrjq-x6h2-qv82, MINI-rrqq-45gm-pfj2, MINI-rrqq-v46q-x9fx, MINI-rrrg-pr28-293m, MINI-rv42-mwvq-mpwp, MINI-rv53-c36v-jxx9, MINI-rv8v-x5jg-5283, MINI-rvcq-hq63-j6hq, MINI-rvgv-p33h-ppwf, MINI-rvj2-frj7-qf3w, MINI-rvp7-qg3m-88w5, MINI-rvwp-45fc-4xc7, MINI-rwv5-wj79-mpf9, MINI-rwvm-8hg9-mr82, MINI-rxc9-mcf8-q288, MINI-rxmq-g648-m25w, MINI-v24q-qq4j-75gv, MINI-v26x-xchj-g7w6, MINI-v2hr-pq54-wf25, MINI-v2j6-6rhm-rwxx, MINI-v2wm-xj88-9q22, MINI-v32m-3jcf-f62r, MINI-v4gr-f3p5-j8jg, MINI-v4v4-6f9x-qw7r, MINI-v524-v37m-2rcp, MINI-v568-833q-mqcp, MINI-v5rm-4787-r29q, MINI-v62w-86gw-3p7g, MINI-v66v-79rq-xx8h, MINI-v6c2-62p3-j5qp, MINI-v6w2-29v3-42c3, MINI-v6x8-h98m-fv76, MINI-v76w-5pmj-4v6g, MINI-v7m2-hpq2-3xfg, MINI-v89p-9vhm-8374, MINI-v8hq-f8h7-9gj3, MINI-v8m4-qw64-v5pc, MINI-v8xm-3gv9-8c8j, MINI-v9gg-fxm4-gg48, MINI-v9mf-g429-f6hc, MINI-vc7h-5655-x934, MINI-vcv8-gx8v-3f55, MINI-vf63-2xg2-gffg, MINI-vfq9-95h4-pm46, MINI-vh3r-65h7-qw3x, MINI-vh6h-4wr4-2vxf, MINI-vhc8-2vx2-49r4, MINI-vj2c-qfx6-g3jp, MINI-vj33-x2j9-8756, MINI-vj5h-px4p-2v4g, MINI-vj6w-4mqx-ggq9, MINI-vjwr-9j53-pchx, MINI-vmg9-3xm4-3px7, MINI-vmqq-9c46-gqr9, MINI-vp84-3gq5-rx67, MINI-vpcf-m3hc-7j25, MINI-vq2h-cjv5-8mgv, MINI-vqh4-3xp3-6vv3, MINI-vqx5-3cwc-pp65, MINI-vr28-c96w-5q2x, MINI-vrfx-h5vg-h6xm, MINI-vv5m-g3w8-6wxx, MINI-vw2v-hq9q-f8vp, MINI-vw85-jp66-mm77, MINI-vwhf-925c-68mw, MINI-vwr7-ph3c-4rcj, MINI-vwrj-h754-mf5w, MINI-vxwm-hqj8-8hqq, MINI-w253-r88r-7g94, MINI-w28m-37qr-jf24, MINI-w2h2-x7g9-xgvq, MINI-w2q9-8w57-h2pp, MINI-w3jq-m3qg-xcmq, MINI-w3vc-7v7c-mppv, MINI-w43h-7264-4vw2, MINI-w4p7-8xrm-v9c2, MINI-w5cc-xp32-wv5w, MINI-w5gq-cqfj-98cv, MINI-w6v3-3wx8-29ch, MINI-w6w8-4vpp-pvwg, MINI-w6wh-w9fm-4r48, MINI-w6xp-w33m-9226, MINI-w738-952m-m354, MINI-w7px-9rc7-jx5p, MINI-w8vc-h26q-3hxw, MINI-w92x-3x6c-4r7h, MINI-w947-gvp5-8x33, MINI-w9x6-j228-jhgj, MINI-wc8x-vrv6-xjx5, MINI-wccp-fqhf-qrq2, MINI-wcgg-4j4m-2q88, MINI-wcjr-7hg4-rqwm, MINI-wcpp-r979-rr3j, MINI-wcwh-c8r4-h7qv, MINI-wf83-2vvm-p3cr, MINI-wfc8-2cf4-c639, MINI-wfgp-rj6v-3q3x, MINI-wfgx-pqmr-7hj7, MINI-wfrg-j8h4-wv8j, MINI-wgj7-w6f9-qgjh, MINI-wgjr-rfhw-pcx4, MINI-wgq2-4hf7-8h7j, MINI-wgwx-jwj2-qjh2, MINI-whh3-39fq-fmh6, MINI-wj62-pm82-c4rx, MINI-wjg6-2mm3-9xwm, MINI-wmc4-pwh3-9gph, MINI-wmw5-jqxr-x7pq, MINI-wq62-cp22-3h94, MINI-wq6w-gq83-622p, MINI-wqgx-v8f7-2h5g, MINI-wqh8-fhpm-xmvc, MINI-wqrh-rxq5-wj94, MINI-wqrv-8ppr-5x76, MINI-wv6j-vvcv-gwmx, MINI-wvp7-95vv-22r6, MINI-wvq4-rc2j-rg3j, MINI-ww3j-ccw4-xjj5, MINI-ww8g-qg5c-q2g6, MINI-wwpv-8x9v-wvm2, MINI-wwrj-7j39-x68x, MINI-wx6j-rf7r-w3hg, MINI-wxg4-3q2p-f464, MINI-x22h-hf5f-cgpf, MINI-x245-2gw5-wvvv, MINI-x28r-59pj-92ch, MINI-x2wm-7h93-j84p, MINI-x32h-79rr-v45q, MINI-x3mh-qj37-m2w8, MINI-x4fm-h6gm-rc6h, MINI-x5c9-7rxc-xhhw, MINI-x73m-crcf-cj3h, MINI-x742-pmqj-8gph, MINI-x76f-vr4f-g2ff, MINI-x7h3-hrg4-6hqp, MINI-x7rw-pfxh-7v3m, MINI-x822-855r-h788, MINI-x8w4-cr2p-5qf7, MINI-x9fx-v468-xhr4, MINI-xc86-vj6w-853p, MINI-xcx7-h4qm-7rv6, MINI-xf44-ggmg-r5x8, MINI-xgp7-vprf-p4ch, MINI-xh5w-w3vv-jvx4, MINI-xhrj-9gcq-hx4r, MINI-xjg4-8qw6-2qwq, MINI-xjp6-54cq-9qcp, MINI-xjvp-w66c-p9gh, MINI-xjxc-j5jc-94v3, MINI-xm58-rjx7-85w8, MINI-xpcf-37vc-844p, MINI-xppf-c3vp-3prh, MINI-xq2f-vv9h-4mpv, MINI-xq67-m2wf-xh2h, MINI-xq96-74rh-fp5r, MINI-xqh8-vqcj-67c5, MINI-xqj2-rhxj-g8m9, MINI-xqm5-5cr6-3696, MINI-xqpr-8fcx-qp7g, MINI-xqx4-cmm6-rxh3, MINI-xrr7-4f7x-2mmf, MINI-xvmf-5wcp-pcj6, MINI-xvmq-5j64-5wpf, MINI-xvph-cgqr-x5qg, MINI-xvq6-4jjw-7m6h, MINI-xvv6-jf2m-9cg5, MINI-xwq4-x84x-797c, MINI-xx46-3mc3-5359, MINI-xx9r-mg99-m9m7, MINI-xxgc-3hh4-798w, MINI-xxgx-m62v-rx7g, MINI-xxqx-rw8p-6jfj, RHSA-2026:57456, RHSA-2026:77319, UBUNTU-CVE-2026-42504, openSUSE-SU-2026:11056-1 ## What is CVE-2026-42504? CVE-2026-42504 is a high-severity denial of service vulnerability in Go standard library mime, published on 2 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim. ### Official description Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. Weakness: CWE-407 (Inefficient Algorithmic Complexity) ## Which versions are affected by CVE-2026-42504? 2 open source packages ship an affected version, including golang and stdlib. | Package | Ecosystem | Affected | Fixed in | | --- | --- | --- | --- | | `golang` | Bitnami | All versions | 1.25.11, 1.26.4 | | `stdlib` | Go | All versions | 1.25.11, 1.26.4 | | `cri-o` | Red Hat:openshift:4.13::el8 | All versions | 0:1.26.5-33.rhaos4.13.git1088e36.el8 | | `cri-o-debuginfo` | Red Hat:openshift:4.13::el8 | All versions | 0:1.26.5-33.rhaos4.13.git1088e36.el8 | | `cri-o-debugsource` | Red Hat:openshift:4.13::el8 | All versions | 0:1.26.5-33.rhaos4.13.git1088e36.el8 | | `cri-o` | Red Hat:openshift:4.13::el9 | All versions | 0:1.26.5-33.rhaos4.13.git1088e36.el9 | | `cri-o-debuginfo` | Red Hat:openshift:4.13::el9 | All versions | 0:1.26.5-33.rhaos4.13.git1088e36.el9 | | `cri-o-debugsource` | Red Hat:openshift:4.13::el9 | All versions | 0:1.26.5-33.rhaos4.13.git1088e36.el9 | | `openshift` | Red Hat:openshift:4.21::el10 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10 | | `openshift-hyperkube` | Red Hat:openshift:4.21::el10 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10 | | `openshift-kube-apiserver` | Red Hat:openshift:4.21::el10 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10 | | `openshift-kube-controller-manager` | Red Hat:openshift:4.21::el10 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10 | | `openshift-kube-scheduler` | Red Hat:openshift:4.21::el10 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10 | | `openshift-kubelet` | Red Hat:openshift:4.21::el10 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el10 | | `openshift` | Red Hat:openshift:4.21::el8 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el8 | | `openshift-hyperkube` | Red Hat:openshift:4.21::el8 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el8 | | `openshift` | Red Hat:openshift:4.21::el9 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el9 | | `openshift-hyperkube` | Red Hat:openshift:4.21::el9 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el9 | | `openshift-kube-apiserver` | Red Hat:openshift:4.21::el9 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el9 | | `openshift-kube-controller-manager` | Red Hat:openshift:4.21::el9 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el9 | | `openshift-kube-scheduler` | Red Hat:openshift:4.21::el9 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el9 | | `openshift-kubelet` | Red Hat:openshift:4.21::el9 | All versions | 0:4.21.0-202608140338.p2.g7ffd39d.assembly.stream.el9 | | `inspektor-gadget` | openSUSE:Tumbleweed | All versions | 0.53.2-1.1 | ## How do I fix CVE-2026-42504? Upgrade golang to a fixed version for your release line: 1.25.11 or 1.26.4. ## Is CVE-2026-42504 being exploited? There is no known exploitation of CVE-2026-42504 in the wild and no public exploit code. ## Fix prompt for AI coding agents ```text Check this codebase for CVE-2026-42504 and fix it if it is affected. What it is: CVE-2026-42504 is a high-severity denial of service vulnerability in Go standard library mime, published on 2 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim. Exploitation: There is no known exploitation of CVE-2026-42504 in the wild and no public exploit code. Affected packages and fixed versions: - golang (Bitnami): affected all versions; fixed in 1.25.11, 1.26.4 - stdlib (Go): affected all versions; fixed in 1.25.11, 1.26.4 Task: 1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies. 2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it. 3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead. 4. Run the tests and summarise what changed and why. 5. If nothing in the project is affected, say so and change nothing. Reference: https://insights.sbomify.com/CVE-2026-42504/ (Markdown: https://insights.sbomify.com/CVE-2026-42504/index.md) ``` ## Sources - CVE record: https://www.cve.org/CVERecord?id=CVE-2026-42504 - NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-42504 - OSV: https://osv.dev/vulnerability/CVE-2026-42504 --- From sbomify Insights: https://insights.sbomify.com/CVE-2026-42504/ Summaries are generated and may contain mistakes; the official description above is the record.