GO-2026-6321

Source
https://pkg.go.dev/vuln/GO-2026-6321
Import Source
https://vuln.go.dev/ID/GO-2026-6321.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2026-6321
Aliases
Published
2026-09-02T18:37:27Z
Modified
2026-09-02T19:45:13.191628777Z
Summary
alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server in github.com/guno1928/alos-http
Details

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server in github.com/guno1928/alos-http

Database specific
{
    "url": "https://pkg.go.dev/vuln/GO-2026-6321",
    "review_status": "UNREVIEWED"
}
References

Affected packages

Go / github.com/guno1928/alos-http

Package

Name
github.com/guno1928/alos-http
View open source insights on deps.dev
Purl
pkg:golang/github.com/guno1928/alos-http

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.0.0-20260617230736-314b6783e196

Database specific

source
"https://vuln.go.dev/ID/GO-2026-6321.json"