{"action":"Upgrade golang.org/x/text to 0.3.8 or later.","affected":[{"fixed":"0.3.8","introduced":"0"}],"component":"golang.org/x/text","cve_ids":["CVE-2022-32149"],"ecosystem":"Go","epss":0.01841,"exploited":false,"fixed_versions":["0.3.8"],"ghsa_id":"GHSA-69ch-w2m2-3vjp","id":"tcs_01M5KFXPV0KVCX8MYQGZKYDK0Z","modified_at":"2026-02-04T03:39:03.311488Z","published_at":"2022-10-11T18:16:24Z","references":["https://osv.dev/vulnerability/GO-2022-1059","https://go.dev/issue/56152","https://go.dev/cl/442235","https://groups.google.com/g/golang-announce/c/-hjNw559_tE/m/KlGTfid5CAAJ"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-1059","url":"https://osv.dev/vulnerability/GO-2022-1059"}],"summary":"Denial of service via crafted Accept-Language header in golang.org/x/text/language"}