CVE-2023-24536

score

<0.1

cvss

7.5

epss

1.5%

published

2023-04-06

kev added

—

first seen

2026-10-21

The Go mime/multipart.Reader.ReadForm and related form parsing methods in net/http contain a vulnerability causing high CPU and memory consumption when processing forms with many parts, potentially leading to denial of service. The fix improves memory estimation and reduces allocations, with limits on parts and headers.