PT-2026-45875 · Google · Go

Published 2026-06-02 · Updated 2026-06-03 · CVE-2026-42507

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Go (affected versions not specified)

Description Functions within the net/textproto package include input as part of the error when returning errors. This behavior allows an attacker to inject misleading content into errors that are subsequently printed or logged.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-42507

GO-2026-5039

Affected Products

Go

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-42507 · Security Note
• https://osv.dev/vulnerability/GO-2026-5039 · Vendor Advisory
• https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw · Note
• https://pkg.go.dev/vuln/GO-2026-5039 · Note
• https://twitter.com/CVEnew/status/2061993210730127373 · Twitter Post
• https://go.dev/cl/777060 · Note
• https://go.dev/issue/79346 · Note