[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-42504":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T17:19:26.604Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":24,"downstream":25,"duplicates":70,"related":71,"reserved_at":9,"published_at":93,"modified_at":94,"state":95,"summary":96,"references_raw":105,"kevs":127,"epss":128,"epss_history":131,"metrics":233,"affected":241},"CVE-2026-42504","Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-407","Inefficient Algorithmic Complexity","An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.","weakness","Incomplete","Class","Low",[],[],[22,23],"GO-2026-5038","BIT-golang-2026-42504",[],[26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68],{"_key":27},"OPENSUSE-SU-2026:10960-1",{"_key":29},"OPENSUSE-SU-2026:10959-1",{"_key":31},"OPENSUSE-SU-2026:10975-1",{"_key":33},"SUSE-SU-2026:2327-1",{"_key":35},"SUSE-SU-2026:2326-1",{"_key":37},"DEBIAN-CVE-2026-42504",{"_key":39},"OPENSUSE-SU-2026:11056-1",{"_key":41},"SUSE-SU-2026:22154-1",{"_key":43},"SUSE-SU-2026:22155-1",{"_key":45},"OPENSUSE-SU-2026:20977-1",{"_key":47},"OPENSUSE-SU-2026:20976-1",{"_key":49},"UBUNTU-CVE-2026-42504",{"_key":51},"OPENSUSE-SU-2026:21254-1",{"_key":53},"MGASA-2026-0276",{"_key":55},"SUSE-SU-2026:22572-1",{"_key":57},"SUSE-SU-2026:22638-1",{"_key":59},"SUSE-SU-2026:3046-1",{"_key":61},"SUSE-SU-2026:3047-1",{"_key":63},"SUSE-SU-2026:3102-1",{"_key":65},"RHSA-2026:23262",{"_key":67},"RHSA-2026:23264",{"_key":69},"OPENSUSE-SU-2026:21319-1",[],[72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91],{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":51},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":92},"CGA-434V-WC8G-CMVQ","2026-06-02T22:01:37.219Z","2026-07-22T20:58:40.167Z","Awaiting Analysis",{"cisa_kev":97,"cisa_ransomware":97,"cisa_vendor":9,"epss_severity":98,"epss_score":99,"severity":100,"severity_score":101,"severity_version":102,"severity_source":103,"severity_vector":104,"severity_status":95},false,"low",0.0056,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[106,113,118,123],{"url":107,"sources":108,"tags":111},"https://go.dev/issue/79217",[103,109,110],"nvd","osv_go",[112],"REPORT",{"url":114,"sources":115,"tags":116},"https://go.dev/cl/774481",[103,109,110],[117],"FIX",{"url":119,"sources":120,"tags":121},"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",[103,109,110],[122],"WEB",{"url":124,"sources":125,"tags":126},"https://pkg.go.dev/vuln/GO-2026-5038",[103,109],[],[],{"date":129,"score":99,"percentile":130},"2026-07-05",0.4254,[132,136,140,143,146,149,153,156,159,162,165,168,171,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,232],{"date":133,"score":134,"percentile":135},"2026-06-03",0.00018,0.04777,{"date":137,"score":138,"percentile":139},"2026-06-04",0.00042,0.12935,{"date":141,"score":138,"percentile":142},"2026-06-05",0.13016,{"date":144,"score":138,"percentile":145},"2026-06-06",0.13019,{"date":147,"score":138,"percentile":148},"2026-06-07",0.12981,{"date":150,"score":151,"percentile":152},"2026-06-08",0.00055,0.17346,{"date":154,"score":151,"percentile":155},"2026-06-09",0.17364,{"date":157,"score":151,"percentile":158},"2026-06-10",0.17404,{"date":160,"score":151,"percentile":161},"2026-06-11",0.17446,{"date":163,"score":151,"percentile":164},"2026-06-12",0.17609,{"date":166,"score":151,"percentile":167},"2026-06-13",0.17626,{"date":169,"score":151,"percentile":170},"2026-06-14",0.17601,{"date":172,"score":173,"percentile":174},"2026-06-15",0.00384,0.30009,{"date":176,"score":173,"percentile":177},"2026-06-16",0.30058,{"date":179,"score":173,"percentile":180},"2026-06-17",0.30079,{"date":182,"score":173,"percentile":183},"2026-06-18",0.30108,{"date":185,"score":173,"percentile":186},"2026-06-19",0.30094,{"date":188,"score":173,"percentile":189},"2026-06-20",0.30078,{"date":191,"score":173,"percentile":192},"2026-06-21",0.30062,{"date":194,"score":173,"percentile":195},"2026-06-22",0.30045,{"date":197,"score":99,"percentile":198},"2026-06-23",0.42188,{"date":200,"score":99,"percentile":201},"2026-06-24",0.42231,{"date":203,"score":99,"percentile":204},"2026-06-25",0.42313,{"date":206,"score":99,"percentile":207},"2026-06-26",0.42354,{"date":209,"score":99,"percentile":210},"2026-06-27",0.42392,{"date":212,"score":99,"percentile":213},"2026-06-28",0.42385,{"date":215,"score":99,"percentile":216},"2026-06-29",0.42388,{"date":218,"score":99,"percentile":219},"2026-06-30",0.42358,{"date":221,"score":99,"percentile":222},"2026-07-01",0.42447,{"date":224,"score":99,"percentile":225},"2026-07-02",0.42482,{"date":227,"score":99,"percentile":228},"2026-07-03",0.425,{"date":230,"score":99,"percentile":231},"2026-07-04",0.42524,{"date":129,"score":99,"percentile":130},[234,239],{"source":103,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":235,"cvss_v4_0":9},{"baseScore":101,"baseSeverity":236,"vectorString":104,"impactScore":237,"exploitabilityScore":238},"HIGH",6,10,{"source":109,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":240,"cvss_v4_0":9},{"baseScore":101,"baseSeverity":236,"vectorString":104,"impactScore":237,"exploitabilityScore":238},[242,257],{"ecosystem":9,"name":243,"vendor":244,"product":243,"cpe_part":245,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":246},"mime","go standard library","a",[247,252],{"version":248,"is_range":249,"range_type":103,"version_start":9,"version_start_type":9,"version_end":250,"version_end_type":251,"fixed_in":9},"\u003C 1.25.11",true,"1.25.11","excluding",{"version":253,"is_range":249,"range_type":103,"version_start":254,"version_start_type":255,"version_end":256,"version_end_type":251,"fixed_in":9},">= 1.26.0-0, \u003C 1.26.4","1.26.0-0","including","1.26.4",{"ecosystem":258,"name":259,"vendor":258,"product":259,"cpe_part":9,"purl_type":260,"purl_namespace":9,"purl_name":259,"source":9,"versions":261},"Go","stdlib","golang",[262],{"version":263,"is_range":249,"range_type":264,"version_start":254,"version_start_type":255,"version_end":256,"version_end_type":251,"fixed_in":9},"gte1_26_0_0_lt1_26_4","semver"]