Package · Debian

golang-github-labstack-echo

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.1

CVE-2026-118264

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's Proxy middleware selects a raw tunnel from a client WebSocket upgrade request before verifying that the configured upstream accepted the upgrade. If the upstream rejects the upgrade with an…

labstack echo golang-github-labstack-echo golang-github-labstack-echo.v2 Debian Ubuntu Go

Oct 28, 2026
Critical 9.6

CVE-2022-40083

Labstack Echo Open Redirect vulnerability

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).

golang-github-labstack-echo golang-github-labstack-echo.v2 golang-github-labstack-echo.v3 github.com/labstack/echo/v4 Debian Ubuntu Go

Sep 28, 2022