Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-32149

Denial of service via crafted Accept-Language header in golang.org/x/text/language

Description

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

golang.org/x/text golang.org/x/text/language

Default version status: unaffected

  • 0 to < 0.3.8affected

References