go standard library

  1. CVE-2026-42504: Go MIME Encoded-Word DoS—How Windows Shops Should Triage & Patch

    CVE-2026-42504 is a newly published denial-of-service vulnerability in Go’s standard-library mime package, disclosed on June 2, 2026, affecting WordDecoder.DecodeHeader before Go 1.25.11 and from Go 1.26.0 through versions before Go 1.26.4. The bug is not a Windows flaw in the traditional Patch...