Go before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.
{ "urgency": "not yet assigned" }