CVE-2022-32149 (High) detected in https://source.codeaurora.org/quic/le/golang/text/v0.2.0-unicode10.0.0 #185
Labels
Mend: dependency security vulnerability
Security vulnerability detected by WhiteSource
CVE-2022-32149 - High Severity Vulnerability
Library home page: https://source.codeaurora.org/quic/le/golang/text/
Found in HEAD commit: 9060713df80212ee5546b36d1083fb607520eb0b
Found in base branch: master
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
Publish Date: 2022-10-14
URL: CVE-2022-32149
Base Score Metrics:
Type: Upgrade version
Origin: https://www.cve.org/CVERecord?id=CVE-2022-32149
Release Date: 2022-10-14
Fix Resolution: v0.3.8
Step up your Open Source Security Game with Mend here
The text was updated successfully, but these errors were encountered: