GO-2021-0113

Source
https://pkg.go.dev/vuln/GO-2021-0113
Import Source
https://vuln.go.dev/ID/GO-2021-0113.json
Aliases
Published
2021-10-06T17:51:21Z
Modified
2023-11-08T04:06:28.495390Z
Details

Due to improper index calculation, an incorrectly formatted language tag can cause Parse to panic via an out of bounds read. If Parse is used to process untrusted user inputs, this may be used as a vector for a denial of service attack.

References

Affected packages

Go / golang.org/x/text

Package

Affected ranges

Type
SEMVER
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.3.7

Ecosystem specific

{
    "imports": [
        {
            "path": "golang.org/x/text/language",
            "symbols": [
                "MatchStrings",
                "MustParse",
                "Parse",
                "ParseAcceptLanguage"
            ]
        }
    ]
}