CVE-2022-32149: Golang Text

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

Affected products

• Golang Text: before 0.3.8 (fixed in 0.3.8)

Published 2022-10-14. Last modified 2026-06-17.