CVE-2022-32149 @ Go-golang.org/x/text-v0.3.7

[apcxtest]

Vulnerable Package issue exists @ Go-golang.org/x/text-v0.3.7 in branch main

In golang.org/x/text package versions prior to 0.3.8, an attacker may cause a denial of service by crafting an Accept-Language header which "ParseAcceptLanguage" will take significant time to parse.

Namespace: apcxtest
Repository: test-repo-pub
Repository Url: https://github.com/apcxtest/test-repo-pub
CxAST-Project: apcxtest/test-repo-pub
CxAST platform scan: a314b9e1-0b75-4c05-86f0-fa4203a6e7fd
Branch: main
Application: test-repo-pub
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-772

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: v0.3.8-0.20220722155301-d03b41800055

---

References
Advisory
Advisory
Mail Thread
Issue
Commit
Release Note