CVE-2026-42507
Vulnerability Summary
Timeline
Description
When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.
CVSS Metrics
- v3.1•MEDIUM•Score: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
EPSS Trends
Current EPSS score: 0.37%• Percentile: 31%
Affected Systems
- chainguard•aactl
< 0.4.12-r54
- chainguard•act
< 0.2.89-r1
- chainguard•actionlint
< 0
- chainguard•actions-runner-controller
< 0.14.2-r2
- chainguard•addon-resizer
< 1.8.23-r20
- chainguard•addon-resizer-fips
< 1.8.23-r19
- chainguard•age-fips
< 1.3.1-r12 | < 0
- chainguard•agentbeat
< 9.2.7-r12
- chainguard•agentbeat-fips
< 9.2.7-r11
- chainguard•amazon-cloudwatch-agent
< 1.300069.0-r2
- chainguard•amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard
< 0
- chainguard•amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard-fips
< 0
- chainguard•amazon-cloudwatch-agent-config-downloader
< 0
- chainguard•amazon-cloudwatch-agent-config-downloader-fips
< 0
- chainguard•amazon-cloudwatch-agent-config-translator
< 0
- chainguard•amazon-cloudwatch-agent-config-translator-fips
< 0
- chainguard•amazon-cloudwatch-agent-fips
< 1.300069.0-r2
- chainguard•amazon-cloudwatch-agent-operator
< 3.5.0-r0
- chainguard•amazon-cloudwatch-agent-start-amazon-cloudwatch-agent
< 0
- chainguard•amazon-cloudwatch-agent-start-amazon-cloudwatch-agent-fips
< 0
- chainguard•amazon-ecs-agent
< 1.103.2-r1
- chainguard•amazon-ecs-cni-plugins-fips
< 2024.9.0_git20260522-r1
- chainguard•amazon-eks-ami
< 20260527-r1
- chainguard•amazon-k8s-cni
< 1.22.1-r1
- chainguard•amazon-k8s-cni-init
< 1.22.1-r1
- chainguard•amazon-k8s-cni-init-fips-compat
< 1.22.1-r2 | < 0
- chainguard•amazon-vpc-cni-plugins-fips
< 1.3_git20260307-r3
- chainguard•ansible-operator
< 1.42.2-r9
- chainguard•apache-exporter
< 1.0.12-r7
- chainguard•apisix-ingress-controller
< 2.1.0-r1
- chainguard•apm-server-8.19
< 8.19.16-r1
- chainguard•apm-server-9.2
< 9.2.8-r6
- chainguard•apm-server-9.3
< 9.3.5-r2
- chainguard•argo-cd-3.0
< 3.0.23-r6
- chainguard•argo-cd-3.0-compat
< 3.0.23-r6
- chainguard•argo-cd-3.1
< 3.1.16-r3
- chainguard•argo-cd-3.1-compat
< 3.1.16-r3
- chainguard•argo-cd-3.3-compat
all
- chainguard•argo-cd-fips-3.0
< 3.0.23-r7
- chainguard•argo-cd-fips-3.0-compat
< 3.0.23-r7
- chainguard•argo-cd-fips-3.1
< 3.1.16-r1
- chainguard•argo-cd-fips-3.1-compat
< 3.1.16-r1
- chainguard•argo-cd-fips-3.2
< 3.2.12-r6
- chainguard•argo-cd-fips-3.2-compat
< 3.2.12-r6
- chainguard•argo-cd-fips-3.3
< 3.3.11-r1
- chainguard•argo-cd-fips-3.3-compat
< 3.3.11-r1
- chainguard•argo-cd-fips-3.4
< 3.4.3-r1
- chainguard•argo-cd-fips-3.4-compat
< 3.4.3-r1
- chainguard•argo-events
< 1.9.10-r25
- chainguard•argo-events-fips
< 1.9.10-r17
Showing first 50 affected entries in server-rendered view.