VYPR

Mime/multipart

by Go Standard Library

CVEs (2)

  • CVE-2023-24536HigApr 6, 2023
    risk 0.49cvss 7.5epss 0.01

    Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several causes: 1. mime/multipart.Reader.ReadForm limits the total memory a parsed multipart form can consume. ReadForm can…

  • CVE-2022-41725HigFeb 28, 2023
    risk 0.49cvss 7.5epss 0.01

    A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can consume largely unlimited amounts of memory and disk files. This also affects form parsing in the net/http package…