golang.org/x/text versions before 0.3.8 are vulnerable to CVE-2022-32149:
An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.
This was flagged in a Whitesource/Mend vulnerability scan. Please update golang.org/x/text in go.mod to a version equal to or higher than 0.3.8.
https://www.cve.org/CVERecord?id=CVE-2022-32149 https://www.mend.io/vulnerability-database/CVE-2022-32149
From looking at the code, I don't understand why
golang.org/x/textis needed at all. It is only used inutil.goin a functionNeuterAccents()which is never called...