Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Go standard library | net/textproto | unaffected |
|
No data.
No data.
OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.
No data.
Project Subscriptions
No data.
No advisories yet.
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Wed, 03 Jun 2026 04:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-107 |
Wed, 03 Jun 2026 02:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged. | |
| Title | Arbitrary inputs are included in errors without any escaping in net/textproto | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: Go
Published:
Updated: 2026-06-02T22:01:37.307Z
Reserved: 2026-04-28T00:21:12.792Z
Link: CVE-2026-42507
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-06-02T23:16:38.027
Modified: 2026-06-02T23:16:38.027
Link: CVE-2026-42507
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-06-03T04:30:05Z