# CVEs published 2021-01-02

2 CVEs were published on January 2, 2021: 0 critical, 0 high. Days are UTC.

- [CVE-2020-28852](https://cve.now/CVE-2020-28852.md): In x/text in Go before v0.3.5, a "slice bounds out of range" panic occurs in language.ParseAcceptLanguage while processing a BCP 47 tag. (no CVSS)
- [CVE-2020-28851](https://cve.now/CVE-2020-28851.md): In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage while parsing the -u- extension. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2021-01-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.