search

cxnleach / Vuln_GO_App

MIT License
0 stars 0 forks source link

CX: CVE-2020-28851 in Go-golang.org/x/text and v0.3.3 @ Vuln_GO_App.master #60

Open github-actions[bot] opened 2 months ago

github-actions[bot] commented 2 months ago

Description

In x/text versions prior to 0.3.6 in Go, an "index out of range" panic occurs in "language.ParseAcceptLanguage" while parsing the "-u- extension". "x/text/language" is supposed to be able to parse an HTTP Accept-Language header.

HIGH Vulnerable Package issue exists @ golang.org/x/text in branch master

Vulnerability ID: CVE-2020-28851

Package Name: golang.org/x/text

Severity: HIGH

CVSS Score: 7.5

Publish Date: 2021-01-02T06:15:00

Current Package Version: v0.3.3

Remediation Upgrade Recommendation: v0.3.3-0.20191122184054-09f8d73ecac2

Link To SCA

Reference – NVD link

github-actions[bot] commented 2 months ago

Issue still exists.