In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
{ "severity": "High", "cpes": [ "cpe:2.3:a:golang:go:1.15.4:*:*:*:*:*:*:*", "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*" ] }