alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server in github.com/guno1928/alos-http
{
"url": "https://pkg.go.dev/vuln/GO-2026-6321",
"review_status": "UNREVIEWED"
}