CVE-2022-32149 @ Go-golang.org/x/text-v0.3.7

[diogopcx]

Vulnerable Package issue exists @ Go-golang.org/x/text-v0.3.7 in branch main

In golang.org/x/text package versions prior to 0.3.8, an attacker may cause a denial of service by crafting an Accept-Language header which "ParseAcceptLanguage" will take significant time to parse.

Namespace: diogopcx
Repository: CheckmarxDemo
Repository Url: https://github.com/diogopcx/CheckmarxDemo
CxAST-Project: diogopcx/CheckmarxDemo
CxAST platform scan: d2f757dc-f7b0-40b5-943d-7be8b61dfaa7
Branch: main
Application: CheckmarxDemo
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-772

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH

---

References
Advisory
Advisory
Mail Thread
Issue
Commit
Release Note