In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
{
"cpes": [
"cpe:2.3:a:golang:go:1.15.4:*:*:*:*:*:*:*",
"cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*"
],
"severity": "High"
}