Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
{ "cpes": [ "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*" ], "severity": "High" }