{"id":"CVE-2026-42504","aliases":[],"title":"Quadratic complexity in WordDecoder.DecodeHeader in mime","description":"Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.","severity":"unknown","score":null,"published":"2026-06-02T22:01:37.219Z","modified":"2026-10-27T16:22:51.253Z","withdrawn":false,"knownExploited":false,"affected":[],"references":["https://go.dev/issue/79217","https://go.dev/cl/774481","https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw","https://pkg.go.dev/vuln/GO-2026-5038"],"sources":[{"name":"CVE","id":"CVE-2026-42504","modified":"2026-10-27T16:22:51.253Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-42504"}],"assessments":[]}