Skip to content

alos-http has unauthenticated remote DoS: malformed path starting with "?" triggers out-of-bounds panic in sanitizeRequestPath, crashing entire server

High severity GitHub Reviewed Published Jun 20, 2026 in guno1928/alos-http • Updated Aug 28, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts