goaccess vulnerabilities

2 known vulnerabilities in goaccess from Allinurl. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  goaccess: Incorrect Conversion between Numeric Types

  CVE-2026-55768Jul 30, 2026Allinurl

  GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadle

• 7.1 High severity

  goaccess: Heap-based Buffer Overflow

  CVE-2026-54715Jul 30, 2026Allinurl

  GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched browser token begins with Opera and moves a trailing version substring to match