CVE-2026-42507

EUVD-2026-34040
When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 29%
Debian logo
Debian Releases
Debian Product
Codename
golang-1.15
bullseye
postponed
golang-1.19
bookworm
no-dsa
golang-1.24
trixie
no-dsa
golang-1.25
forky
1.25.12-1
fixed
sid
1.25.12-1
fixed
golang-1.26
forky
1.26.5-1
fixed
sid
1.26.5-1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
go-toolset
RHEL 9
0:1.26.4-1.el9_8
fixed
golang
RHEL 9
0:1.26.4-1.el9_8
fixed
golang-bin
RHEL 9
0:1.26.4-1.el9_8
fixed
golang-docs
RHEL 9
0:1.26.4-1.el9_8
fixed
golang-misc
RHEL 9
0:1.26.4-1.el9_8
fixed
golang-race
RHEL 9
0:1.26.4-1.el9_8
fixed
golang-src
RHEL 9
0:1.26.4-1.el9_8
fixed
golang-tests
RHEL 9
0:1.26.4-1.el9_8
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
compat-golang-github-cpuguy83-md2man-2-devel
Amazon Linux 2023
0:2.0.2-24.amzn2023.0.8
fixed
containerd
Amazon Linux 2023
0:2.2.5-1.amzn2023.0.1
fixed
containerd-debuginfo
Amazon Linux 2023
0:2.2.5-1.amzn2023.0.1
fixed
containerd-debugsource
Amazon Linux 2023
0:2.2.5-1.amzn2023.0.1
fixed
containerd-stress
Amazon Linux 2023
0:2.2.5-1.amzn2023.0.1
fixed
containerd-stress-debuginfo
Amazon Linux 2023
0:2.2.5-1.amzn2023.0.1
fixed
credentials-fetcher
Amazon Linux 2023
0:2.0.3-1.amzn2023.0.1
fixed
docker
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.3
fixed
docker-debuginfo
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.3
fixed
docker-debugsource
Amazon Linux 2023
0:25.0.16-1.amzn2023.0.3
fixed
ecs-init
Amazon Linux 2023
0:1.105.0-1.amzn2023
fixed
golang
Amazon Linux 2
0:1.25.11-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.25.11-1.amzn2023.0.1
fixed
golang-bin
Amazon Linux 2
0:1.25.11-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.25.11-1.amzn2023.0.1
fixed
golang-docs
Amazon Linux 2
0:1.25.11-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.25.11-1.amzn2023.0.1
fixed
golang-github-burntsushi-toml
Amazon Linux 2023
0:1.5.0-1.amzn2023.0.2
fixed
golang-github-burntsushi-toml-debuginfo
Amazon Linux 2023
0:1.5.0-1.amzn2023.0.2
fixed
golang-github-burntsushi-toml-debugsource
Amazon Linux 2023
0:1.5.0-1.amzn2023.0.2
fixed
golang-github-burntsushi-toml-devel
Amazon Linux 2023
0:1.5.0-1.amzn2023.0.2
fixed
golang-github-burntsushi-toml-test
Amazon Linux 2023
0:0.2.0-8.amzn2023.0.4
fixed
golang-github-burntsushi-toml-test-debuginfo
Amazon Linux 2023
0:0.2.0-8.amzn2023.0.4
fixed
golang-github-burntsushi-toml-test-debugsource
Amazon Linux 2023
0:0.2.0-8.amzn2023.0.4
fixed
golang-github-burntsushi-toml-test-devel
Amazon Linux 2023
0:0.2.0-8.amzn2023.0.4
fixed
golang-github-cpuguy83-md2man
Amazon Linux 2023
0:2.0.2-24.amzn2023.0.8
fixed
golang-github-cpuguy83-md2man-debuginfo
Amazon Linux 2023
0:2.0.2-24.amzn2023.0.8
fixed
golang-github-cpuguy83-md2man-debugsource
Amazon Linux 2023
0:2.0.2-24.amzn2023.0.8
fixed
golang-github-cpuguy83-md2man-devel
Amazon Linux 2023
0:2.0.2-24.amzn2023.0.8
fixed
golang-misc
Amazon Linux 2
0:1.25.11-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.25.11-1.amzn2023.0.1
fixed
golang-shared
Amazon Linux 2
0:1.25.11-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.25.11-1.amzn2023.0.1
fixed
golang-src
Amazon Linux 2
0:1.25.11-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.25.11-1.amzn2023.0.1
fixed
golang-tests
Amazon Linux 2
0:1.25.11-1.amzn2.0.1
fixed
Amazon Linux 2023
0:1.25.11-1.amzn2023.0.1
fixed
golist
Amazon Linux 2
0:0.10.1-10.amzn2.0.14
fixed
Amazon Linux 2023
0:0.10.4-12.amzn2023.0.10
fixed
golist-debuginfo
Amazon Linux 2
0:0.10.1-10.amzn2.0.14
fixed
Amazon Linux 2023
0:0.10.4-12.amzn2023.0.10
fixed
golist-debugsource
Amazon Linux 2023
0:0.10.4-12.amzn2023.0.10
fixed
nerdctl
Amazon Linux 2
0:2.2.2-1.amzn2.0.4
fixed
Amazon Linux 2023
0:2.2.2-1.amzn2023.0.4
fixed
nerdctl-debuginfo
Amazon Linux 2
0:2.2.2-1.amzn2.0.4
fixed
soci-snapshotter
Amazon Linux 2023
0:0.14.1-1.amzn2023.0.1
fixed
Vulnerability Media Exposure
References
https://go.dev/cl/777060
https://go.dev/issue/79346
https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw
https://pkg.go.dev/vuln/GO-2026-5039