Vulnerability GO-2022-1059
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 years ago
October 11, 2022 at 06:16 PM UTC
Denial of service via crafted Accept-Language header in golang.org/x/text/language
v0.1.0 - v0.3.7
v0.1.0 - v0.3.7
Summary
Denial of service via crafted Accept-Language header in golang.org/x/text/language
Details
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
7 hours ago
Panic parsing crafted input in x/text/secure/precis in golang.org/x/text
v0.1.0 - v0.40.0 GO-2026-6629
v0.1.0 - v0.40.0 GO-2026-6629
Unknown
2 months ago
Infinite loop on invalid input in golang.org/x/text
v0.1.0 - v0.38.0 GO-2026-5970
v0.1.0 - v0.38.0 GO-2026-5970
High Risk
3 years ago
golang.org/x/text/language Out-of-bounds Read vulnerability
v0.1.0 - v0.3.6 GHSA-ppp9-7jff-5vj2
v0.1.0 - v0.3.6 GHSA-ppp9-7jff-5vj2
High Risk
3 years ago
golang.org/x/text/language Denial of service via crafted Accept-Language header
v0.1.0 - v0.3.7 GHSA-69ch-w2m2-3vjp
v0.1.0 - v0.3.7 GHSA-69ch-w2m2-3vjp
Unknown
5 years ago
Out-of-bounds read in golang.org/x/text/language
v0.1.0 - v0.3.6 GO-2021-0113
v0.1.0 - v0.3.6 GO-2021-0113
Impacted packages
Timeline
Published
3 years ago
October 11, 2022 at 06:16 PM UTC
Last Modified
8 months ago
February 04, 2026 at 03:39 AM UTC