VULNRABLE / Vulnerability / CVE-2026-55484

CVE-2026-55484

HIGH LOW github.com/guno1928/alos-http GHSA

Exploit verdict: No active-exploit signal

CVSS Score

Severity

HIGH

EPSS

Source

GHSA

Summary

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

What this means

CVE-2026-55484 is a high-severity vulnerability affecting github.com/guno1928/alos-http, rated CVSS 8. The EPSS model estimates a 0% probability of exploitation in the next 30 days. Published August 29, 2026.

View full advisory at GHSA →