CVE-2020-28852 in GoLang and Canonical Products
Published on January 2, 2021
In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (x/text/language is supposed to be able to parse an HTTP Accept-Language header.)
Products Associated with CVE-2020-28852
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-28852 are published in these products:
Exploit Probability
EPSS
0.11%
Percentile
29.05%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.