GO-2022-1059

Source
https://pkg.go.dev/vuln/GO-2022-1059
Import Source
https://vuln.go.dev/ID/GO-2022-1059.json
Aliases
Published
2022-10-11T18:16:24Z
Modified
2023-11-08T04:09:34.536752Z
Details

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

References

Affected packages

Go / golang.org/x/text

Package

Name
golang.org/x/text

Affected ranges

Type
SEMVER
Events
Introduced
0The exact introduced commit is unknown
Fixed
0.3.8

Ecosystem specific 

{
    "imports": [
        {
            "path": "golang.org/x/text/language",
            "symbols": [
                "MatchStrings",
                "ParseAcceptLanguage"
            ]
        }
    ]
}