CVE-2026-58436

ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests...

CVE-2026-58436

The Git repository management system Gitea is vulnerable to a Denial of Service (DoS) condition due to a quadratic-time algorithm in the ParseAcceptLanguage function. This flaw exists within the Locale middleware (specifically in the modules/web/middleware/locale.go file) and is triggered by impr...

CVE-2026-58436 ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests

ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests...

CVE-2026-58436

creationtimestamp| type| source ---|---|--- 2026-07-21 22:36:50+00:00| published-proof-of-concept| https://github.com/go-gitea/gitea/security/advisories/GHSA-fw57-jgch-pgf3...