CVE-2026-61629 | lucasdillmann nginx-ignition up to 2.40.0 i18n middleware golang.org/x/text/language.ParseAcceptLanguage resource consumption

September 21, 2026 Yanac

A vulnerability described as problematic has been identified in lucasdillmann nginx-ignition up to 2.40.0. This issue affects the function golang.org/x/text/language.ParseAcceptLanguage of the component i18n middleware. The manipulation results in resource consumption.

This vulnerability is identified as CVE-2026-61629. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More