Vulnerability GO-2026-6890
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:54 PM UTC
Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware in github.com/daptin/daptin
*
*
Summary
Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware in github.com/daptin/daptin
Details
Daptin: ParseAcceptLanguage _ separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware in github.com/daptin/daptin
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
7 days ago
Daptin: ParseAcceptLanguage `_` separator bypass enables >250x CPU amplification via Accept-Language header in LanguageMiddleware
<=0.12.15 GHSA-rhj7-vh3v-mcq6
<=0.12.15 GHSA-rhj7-vh3v-mcq6
Unknown
4 months ago
Daptin: SQL injection via unvalidated goqu.L() calls in aggregate API in github.com/daptin/daptin
<0.11.4 GO-2026-5640
<0.11.4 GO-2026-5640
Unknown
4 months ago
Daptin fuzzy search injects unvalidated column name into raw SQL in github.com/daptin/daptin
<0.11.5 GO-2026-5555
<0.11.5 GO-2026-5555
Unknown
4 months ago
Daptin has Unauthenticated Path Traversal and Zip Slip in github.com/daptin/daptin
<0.12.0 GO-2026-5285
<0.12.0 GO-2026-5285
Unknown
5 months ago
Daptin's Session Management Vulnerability Leads to Insufficient Session Expiration After Password Change in github.com/daptin/daptin
<0.11.8 GO-2026-4991
<0.11.8 GO-2026-4991
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:54 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC