alos-http vulnerabilities

1 known vulnerability in alos-http from Guno1928. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  alos-http: Uncaught Exception

  CVE-2026-55484Aug 28, 2026Guno1928

  ALOS HTTP is a Linux-first Go web framework and application server built around a custom networking stack. Prior to 0.0.0-20260617230736-314b6783e196, core/utils.go::sanitizeRequestPath calls splitPathQuery on a request path beginning with a question mark and