[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2021-38561":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T20:55:29.923Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":23,"aliases":24,"duplicate_of":9,"upstream":27,"downstream":28,"duplicates":43,"related":44,"reserved_at":9,"published_at":69,"modified_at":70,"state":71,"summary":72,"references_raw":81,"kevs":120,"epss":121,"epss_history":124,"metrics":395,"affected":405},"CVE-2021-38561","golang.org/x/text/language in golang.org/x/text before 0.3.7 can panic with an out-of-bounds read during BCP 47 language tag parsing. Index calculation is mishandled. If parsing untrusted user input, this can be used as a vector for a denial-of-service attack.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base",[19],{"id":20,"name":21,"techniques":22},"CAPEC-540","Overread Buffers",[],[],[25,26],"GHSA-ppp9-7jff-5vj2","GO-2021-0113",[],[29,31,33,35,37,39,41],{"_key":30},"UBUNTU-CVE-2021-38561",{"_key":32},"OPENSUSE-SU-2024:12599-1",{"_key":34},"OPENSUSE-SU-2024:14015-1",{"_key":36},"USN-5873-1",{"_key":38},"DEBIAN-CVE-2021-38561",{"_key":40},"RHBA-2023:1649",{"_key":42},"RHSA-2023:0407",[],[45,46,47,48,49,51,53,55,57,59,61,63,65,67],{"_key":40},{"_key":42},{"_key":32},{"_key":34},{"_key":50},"CGA-4C8W-VQVR-MV59",{"_key":52},"CGA-6QPP-HPV7-3R69",{"_key":54},"CGA-8WGV-MQW5-XC92",{"_key":56},"CGA-92VV-799F-R2WQ",{"_key":58},"CGA-G4PJ-QXWV-MVX7",{"_key":60},"CGA-M639-PVH6-69X9",{"_key":62},"CGA-PJF7-M777-7GXG",{"_key":64},"CGA-PQWF-XV4P-QJ38",{"_key":66},"CGA-WX7P-JM87-FP4C",{"_key":68},"CGA-RXMV-QQ37-M2JC","2022-12-26T00:00:00.000Z","2025-04-14T16:15:14.817Z","Modified",{"cisa_kev":73,"cisa_ransomware":73,"cisa_vendor":9,"epss_severity":74,"epss_score":75,"severity":76,"severity_score":77,"severity_version":78,"severity_source":79,"severity_vector":80,"severity_status":71},false,"low",0.00053,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[82,91,98,102,107,112,116],{"url":83,"sources":84,"tags":87},"https://groups.google.com/g/golang-announce",[79,85,86],"nvd","osv_go",[88,89,90],"Mailing List","Third Party Advisory","WEB",{"url":92,"sources":93,"tags":94},"https://go.googlesource.com/text/+/383b2e75a7a4198c42f8f87833eefb772868a56f",[79,85,86],[88,95,96,90,97],"Patch","Vendor Advisory","FIX",{"url":99,"sources":100,"tags":101},"https://deps.dev/advisory/OSV/GO-2021-0113",[79,85,86],[95,89,90],{"url":103,"sources":104,"tags":105},"https://pkg.go.dev/golang.org/x/text/language",[79,85,86],[106,96,90],"Product",{"url":108,"sources":109,"tags":110},"https://nvd.nist.gov/vuln/detail/CVE-2021-38561",[86],[111],"Advisory",{"url":113,"sources":114,"tags":115},"https://go.dev/cl/340830",[86],[90,97],{"url":117,"sources":118,"tags":119},"https://pkg.go.dev/vuln/GO-2021-0113",[86],[90],[],{"date":122,"score":75,"percentile":123},"2026-06-04",0.16869,[125,129,132,135,138,141,144,147,150,153,156,158,161,164,167,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,268,271,274,277,280,283,286,289,292,295,298,301,304,307,310,313,316,319,321,324,327,330,333,336,340,343,345,348,351,354,357,360,363,366,369,372,375,378,381,383,386,389,392],{"date":126,"score":127,"percentile":128},"2025-11-04",0.0007,0.21725,{"date":130,"score":127,"percentile":131},"2025-11-05",0.21726,{"date":133,"score":127,"percentile":134},"2025-11-06",0.21733,{"date":136,"score":127,"percentile":137},"2025-11-07",0.21749,{"date":139,"score":127,"percentile":140},"2025-11-08",0.21757,{"date":142,"score":127,"percentile":143},"2025-11-09",0.21711,{"date":145,"score":127,"percentile":146},"2025-11-10",0.21649,{"date":148,"score":127,"percentile":149},"2025-11-11",0.21674,{"date":151,"score":127,"percentile":152},"2025-11-12",0.21731,{"date":154,"score":127,"percentile":155},"2025-11-13",0.21744,{"date":157,"score":127,"percentile":134},"2025-11-14",{"date":159,"score":127,"percentile":160},"2025-11-15",0.21719,{"date":162,"score":127,"percentile":163},"2025-11-16",0.21667,{"date":165,"score":127,"percentile":166},"2025-11-17",0.21628,{"date":168,"score":169,"percentile":170},"2025-11-18",0.00842,0.72701,{"date":172,"score":169,"percentile":173},"2025-11-19",0.72709,{"date":175,"score":169,"percentile":176},"2025-11-20",0.72718,{"date":178,"score":127,"percentile":179},"2025-11-21",0.21597,{"date":181,"score":127,"percentile":182},"2025-11-22",0.21592,{"date":184,"score":127,"percentile":185},"2025-11-23",0.21556,{"date":187,"score":127,"percentile":188},"2025-11-24",0.21528,{"date":190,"score":127,"percentile":191},"2025-11-25",0.21512,{"date":193,"score":127,"percentile":194},"2025-11-26",0.21501,{"date":196,"score":127,"percentile":197},"2025-11-27",0.21463,{"date":199,"score":127,"percentile":200},"2025-11-28",0.21439,{"date":202,"score":127,"percentile":203},"2025-11-29",0.21425,{"date":205,"score":127,"percentile":206},"2025-11-30",0.21416,{"date":208,"score":127,"percentile":209},"2025-12-01",0.21464,{"date":211,"score":127,"percentile":212},"2025-12-02",0.21482,{"date":214,"score":127,"percentile":215},"2025-12-03",0.21492,{"date":217,"score":127,"percentile":218},"2025-12-04",0.21433,{"date":220,"score":127,"percentile":221},"2025-12-05",0.21476,{"date":223,"score":127,"percentile":224},"2025-12-06",0.21473,{"date":226,"score":127,"percentile":227},"2025-12-07",0.21446,{"date":229,"score":127,"percentile":230},"2025-12-08",0.21458,{"date":232,"score":127,"percentile":233},"2025-12-09",0.2151,{"date":235,"score":127,"percentile":236},"2025-12-10",0.21585,{"date":238,"score":127,"percentile":239},"2025-12-11",0.21625,{"date":241,"score":127,"percentile":242},"2025-12-12",0.2164,{"date":244,"score":127,"percentile":245},"2025-12-13",0.21645,{"date":247,"score":127,"percentile":248},"2025-12-14",0.21614,{"date":250,"score":127,"percentile":251},"2025-12-15",0.21591,{"date":253,"score":127,"percentile":254},"2025-12-16",0.21622,{"date":256,"score":127,"percentile":257},"2025-12-17",0.21698,{"date":259,"score":127,"percentile":260},"2025-12-18",0.21781,{"date":262,"score":127,"percentile":263},"2025-12-19",0.21804,{"date":265,"score":266,"percentile":267},"2025-12-20",0.00095,0.27228,{"date":269,"score":266,"percentile":270},"2025-12-21",0.27191,{"date":272,"score":266,"percentile":273},"2025-12-22",0.27162,{"date":275,"score":266,"percentile":276},"2025-12-23",0.27127,{"date":278,"score":266,"percentile":279},"2025-12-24",0.27138,{"date":281,"score":266,"percentile":282},"2025-12-25",0.27213,{"date":284,"score":266,"percentile":285},"2025-12-26",0.27206,{"date":287,"score":266,"percentile":288},"2025-12-27",0.27196,{"date":290,"score":266,"percentile":291},"2025-12-28",0.27119,{"date":293,"score":266,"percentile":294},"2025-12-29",0.27089,{"date":296,"score":266,"percentile":297},"2025-12-30",0.27086,{"date":299,"score":266,"percentile":300},"2025-12-31",0.27152,{"date":302,"score":266,"percentile":303},"2026-01-01",0.27263,{"date":305,"score":266,"percentile":306},"2026-01-02",0.27262,{"date":308,"score":266,"percentile":309},"2026-01-03",0.27242,{"date":311,"score":266,"percentile":312},"2026-01-04",0.27139,{"date":314,"score":266,"percentile":315},"2026-01-05",0.27129,{"date":317,"score":266,"percentile":318},"2026-01-06",0.27133,{"date":320,"score":266,"percentile":273},"2026-01-07",{"date":322,"score":266,"percentile":323},"2026-01-08",0.27209,{"date":325,"score":266,"percentile":326},"2026-01-09",0.27195,{"date":328,"score":266,"percentile":329},"2026-01-10",0.27165,{"date":331,"score":266,"percentile":332},"2026-01-11",0.27147,{"date":334,"score":266,"percentile":335},"2026-01-12",0.27102,{"date":337,"score":338,"percentile":339},"2026-01-13",0.00115,0.30908,{"date":341,"score":75,"percentile":342},"2026-01-14",0.16844,{"date":344,"score":75,"percentile":342},"2026-01-15",{"date":346,"score":75,"percentile":347},"2026-01-16",0.16889,{"date":349,"score":75,"percentile":350},"2026-01-17",0.16897,{"date":352,"score":75,"percentile":353},"2026-01-18",0.16839,{"date":355,"score":75,"percentile":356},"2026-01-19",0.16791,{"date":358,"score":75,"percentile":359},"2026-01-20",0.16762,{"date":361,"score":75,"percentile":362},"2026-01-21",0.16741,{"date":364,"score":75,"percentile":365},"2026-01-22",0.16677,{"date":367,"score":75,"percentile":368},"2026-01-23",0.16755,{"date":370,"score":75,"percentile":371},"2026-01-24",0.16783,{"date":373,"score":75,"percentile":374},"2026-01-25",0.16715,{"date":376,"score":75,"percentile":377},"2026-01-26",0.16616,{"date":379,"score":75,"percentile":380},"2026-01-27",0.16606,{"date":382,"score":75,"percentile":377},"2026-01-28",{"date":384,"score":75,"percentile":385},"2026-01-29",0.16589,{"date":387,"score":75,"percentile":388},"2026-01-30",0.16597,{"date":390,"score":75,"percentile":391},"2026-01-31",0.16615,{"date":393,"score":75,"percentile":394},"2026-02-01",0.16644,[396,401,403],{"source":79,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":397,"cvss_v4_0":9},{"baseScore":77,"baseSeverity":398,"vectorString":80,"impactScore":399,"exploitabilityScore":400},"HIGH",6,10,{"source":85,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":402,"cvss_v4_0":9},{"baseScore":77,"baseSeverity":398,"vectorString":80,"impactScore":399,"exploitabilityScore":400},{"source":86,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":404,"cvss_v4_0":9},{"baseScore":77,"baseSeverity":9,"vectorString":80,"impactScore":399,"exploitabilityScore":400},[406,419],{"ecosystem":407,"name":408,"vendor":409,"product":410,"cpe_part":9,"purl_type":411,"purl_namespace":409,"purl_name":410,"source":9,"versions":412},"Go","golang.org/x/text","golang.org/x","text","golang",[413],{"version":414,"is_range":415,"range_type":416,"version_start":9,"version_start_type":9,"version_end":417,"version_end_type":418,"fixed_in":9},"lt0_3_7",true,"semver","0.3.7","excluding",{"ecosystem":9,"name":410,"vendor":411,"product":410,"cpe_part":420,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":421},"a",[422],{"version":423,"is_range":415,"range_type":424,"version_start":9,"version_start_type":9,"version_end":417,"version_end_type":418,"fixed_in":9},"lt0.3.7","cpe"]