{"action":"Upgrade golang.org/x/text to 0.3.8 or later.","affected":[{"fixed":"0.3.8","introduced":"0"}],"component":"golang.org/x/text","cve_ids":["CVE-2022-32149"],"ecosystem":"Go","epss":0.01841,"exploited":false,"fixed_versions":["0.3.8"],"ghsa_id":"GHSA-69ch-w2m2-3vjp","id":"tcs_01M5KEZSXMC1SDWBKTBR5JJNZW","modified_at":"2026-09-10T03:49:46.240531909Z","published_at":"2022-10-14T19:00:40Z","references":["https://osv.dev/vulnerability/GHSA-69ch-w2m2-3vjp","https://nvd.nist.gov/vuln/detail/CVE-2022-32149","https://github.com/golang/go/issues/56152","https://github.com/golang/text/commit/434eadcdbc3b0256971992e8c70027278364c72c","https://github.com/golang/text","https://go.dev/cl/442235","https://go.dev/issue/56152","https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ","https://pkg.go.dev/vuln/GO-2022-1059","https://security.netapp.com/advisory/ntap-20230203-0006"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-69ch-w2m2-3vjp","url":"https://osv.dev/vulnerability/GHSA-69ch-w2m2-3vjp"}],"summary":"golang.org/x/text/language Denial of service via crafted Accept-Language header"}