https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:31:20.391612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-343529 EUVD-2026-343529 2026-10-02T17:31:20.474190+00:00 EUVD-2026-343529 https://cve.radiocsirt.org/vuln/fkie_cve-2026-55768 fkie_cve-2026-55768 2026-10-02T17:31:20.474233+00:00

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size, allowing an unauthenticated remote client to bypass the guard and force an approximately 18-exabyte allocation request that terminates the process. This issue is fixed in version 1.11.

 https://cve.radiocsirt.org/vuln/oesa-2026-3263 OESA-2026-3263 — goaccess security update 2026-10-02T17:31:20.474283+00:00

Affected: openEuler:20.03-LTS-SP4: goaccess, openEuler:22.03-LTS-SP4: goaccess, openEuler:24.03-LTS-SP1: goaccess, openEuler:24.03-LTS-SP3: goaccess, openEuler:24.03-LTS-SP4: goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems. It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly. Security Fix(es):

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Agent in a processed access log to write one to four attacker-influenced bytes beyond the heap allocation and corrupt or crash GoAccess. This issue is fixed in version 1.11.(CVE-2026-54715)

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size, allowing an unauthenticated remote client to bypass the guard and force an approximately 18-exabyte allocation request that terminates the process. This issue is fixed in version 1.11.(CVE-2026-55768)

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to 1.11, the parse_ios() function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy le…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-55768 UBUNTU-CVE-2026-55768 2026-10-02T17:31:20.474373+00:00

Affected: Ubuntu:16.04:LTS: goaccess, Ubuntu:18.04:LTS: goaccess, Ubuntu:20.04:LTS: goaccess, Ubuntu:22.04:LTS: goaccess, Ubuntu:24.04:LTS: goaccess, Ubuntu:26.04:LTS: goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size, allowing an unauthenticated remote client to bypass the guard and force an approximately 18-exabyte allocation request that terminates the process. This issue is fixed in version 1.11.