Most recent entries from all

EUVD-2026-343305

fkie_cve-2026-54715

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. In version 1.10.2, parse_browser assumes the matched browser token begins with Opera and moves a trailing version substring to match plus five, allowing a crafted User-Agent in a processed access log to write one to four attacker-influenced bytes beyond the heap allocation and corrupt or crash GoAccess. This issue is fixed in version 1.11.

OESA-2026-3263 — goaccess security update

Affected: openEuler:20.03-LTS-SP4: goaccess, openEuler:22.03-LTS-SP4: goaccess, openEuler:24.03-LTS-SP1: goaccess, openEuler:24.03-LTS-SP3: goaccess, openEuler:24.03-LTS-SP4: goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems. It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly. Security Fix(es):

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to version 1.11, the built-in WebSocket server narrows a 64-bit extended frame length into the signed 32-bit WSFrame.payloadlen field before enforcing the maximum frame size, allowing an unauthenticated remote client to bypass the guard and force an approximately 18-exabyte allocation request that terminates the process. This issue is fixed in version 1.11.(CVE-2026-55768)

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through the browser. Prior to 1.11, the parse_ios() function uses an attacker-controlled keyword-to-OS offset as both the source offset and copy le…

UBUNTU-CVE-2026-54715

Affected: Ubuntu:16.04:LTS: goaccess, Ubuntu:18.04:LTS: goaccess, Ubuntu:20.04:LTS: goaccess, Ubuntu:22.04:LTS: goaccess, Ubuntu:24.04:LTS: goaccess, Ubuntu:26.04:LTS: goaccess