cve 2026 42507

CVE-2026-42507 is a Go standard-library vulnerability published in early June 2026 in which net/textproto could include attacker-controlled input in error messages without escaping it, creating a path for misleading log entries or terminal-control injection in software that prints or records...