golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags

A vulnerability was found in the golang.org/x/text/language package. An attacker can craft an Accept-Language header which ParseAcceptLanguage will take significant time to parse. This issue leads to a denial of service, and can impact availability...

The vulnerability of the golang.org/x/text/language component in the Go language text library, which allows attackers to trigger a denial-of-service attack.

The vulnerability of the golang.org/x/text/language component in the Go language programming library is related to deficiencies in resource release after the expiration of its useful period. Exploiting this vulnerability could allow an attacker to cause service failures...