CVE-2026-42504 is a newly published denial-of-service vulnerability in Go’s standard-library mime package, disclosed on June 2, 2026, affecting WordDecoder.DecodeHeader before Go 1.25.11 and from Go 1.26.0 through versions before Go 1.26.4. The bug is not a Windows flaw in the traditional Patch...