title: Denial of service via crafted Accept-Language header in golang.org/x/text/language
description: An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
problem types: CWE 400: Uncontrolled Resource Consumption
affected:
{
vendor: golang.org/x/text
product: golang.org/x/text/language
collectionURL: https://pkg.go.dev
packageName: golang.org/x/text/language
versions:
version: 0, lessThan: 0.3.8, status: affected, versionType: semver
programRoutines:
name: ParseAcceptLanguage
name: MatchStrings
defaultStatus: unaffected
}