CVE-2022-32149General(golang / text)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parse.

golang CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Other references

https://security.netapp.com/advisory/ntap-20230203-0006/

Weakness type (CWE)

CWE-772

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

text

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
General: 1 classified signal
Disclosure: 1 classified signal
Peaked 1d ago at 1 mentions (2026-05-29); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

golang

Products

text

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

General

150.0%

Disclosure

150.0%

Referenced assets1 URL

By indicator

https://dailycve.com/nginx-ignition-unauthenticated-accept-language-parser-cpu-exhaustion-cve-2022-32149-critical-dc-sep2026-2502/

Classification over time

Date	Total	Labels

2026-05-29	1	General1
2026-09-21	1	Disclosure1

Full discourse2 posts

DailyCVE@dailycve21d
Disclosure
🔴 nginx-ignition, Unauthenticated Accept-Language Parser CPU Exhaustion, #CVE-2022-32149 (Critical) -DC-Sep2026-2502 https://dailycve.com/nginx-ignition-unauthenticated-accept-language-parser-cpu-exhaustion-cve-2022-32149-critical-dc-sep2026-2502/
Post summary
The post announces a critical nginx-ignition CPU exhaustion vulnerability in the Accept-Language parser identified as CVE-2022-32149. It provides technical framing but no PoC, exploit tool, active exploitation report, or remediation details.
0000046
238 followersView on X
Delegated.dale.eth@dale_sid65454136d
General
@cryptoWZRD_ CVE-2022-32149
Post summary
The tweet merely references CVE-2022-32149 with no additional context or details.
0000037
178 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	golang	text	-	-	-

Explore more

Back to dashboard golang CVEs text vulnerabilities