PUBLISHED
2026-08-13 17:17
MODIFIED
2026-08-13 17:17
EPSS (Prob. Exploit)
0.61%
Top 50.8%
> DESCRIPTION
ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-407: Inefficient Algorithmic Complexity - An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached. | CWE-1333: Inefficient Regular Expression Complexity - The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
> GITHUB SECURITY ADVISORY
GHSA-fw57-jgch-pgf3
HIGH
Gitea: ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
AFFECTED PACKAGES:
GO / code.gitea.io/gitea
< 1.27.0
Fixed in: 1.27.0
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
AFFECTED PACKAGES:
Unknown / Unknown
38 versions affected
ALIASES:
GHSA-fw57-jgch-pgf3, GO-2026-6055
> HISTORIQUE DES MODIFICATIONS
Première apparition
13/08/2026 17:17
Source: NVD
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-407: Inefficient Algorithmic Complexity - An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an ...
Total des modifications: 1
Dernière mise à jour: 2 months ago