CVE-2026-55484

2 advisories.

Go/github.com/guno1928/alos-http CVE-2026-55484: high 7.5

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

Action: Upgrade github.com/guno1928/alos-http to 0.0.0-20260617230736-314b6783e196 or later.

go get github.com/guno1928/alos-http@v0.0.0-20260617230736-314b6783e196

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

0.0.0-20260617230736-314b6783e196

Sources

CVE-2026-55484 · published 2026-08-28T19:19:38Z · modified 2026-09-02T19:55:34.438739097Z · JSON

Go/github.com/guno1928/alos-http CVE-2026-55484: unknown

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server in github.com/guno1928/alos-http

Action: Upgrade github.com/guno1928/alos-http to 0.0.0-20260617230736-314b6783e196 or later.

go get github.com/guno1928/alos-http@v0.0.0-20260617230736-314b6783e196

Affected

introduced	fixed	last affected
0	-	-

Fixed versions

0.0.0-20260617230736-314b6783e196

Sources

CVE-2026-55484 · published 2026-09-02T18:37:27Z · modified 2026-09-02T19:45:13.191628777Z · JSON