CVE-2020-28851

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension

published January 2, 2021

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02325 · 83.4th percentile
Published
2021-01-02T05:42Z
EPSS history
Timeline
  • 02 JAN 05:42Z
    In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension
    cvelistv5