allinurl goaccess
- CVE-2026-55777 GoAccess: Out-of-bounds heap read in parse_ios() via crafted User-Agent leads to remote crash/DoS 0.4%
- CVE-2026-55768 GoAccess WebSocket Server: Signed 32 bit truncation of the 64 bit frame length causes a remote pre-authentication denial of service 0.5%
- CVE-2026-54715 GoAccess: Heap Out-of-Bounds Write in parse_browser() 0.4%