Skip to content
OpenAdvisories

Package · Go

github.com/lin-snow/Ech0

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-35037 Public exploit

    Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata

    Ech0 is an open-source, self-hosted publishing platform for personal idea sharing. Prior to 4.2.8, the GET /api/website/title endpoint accepts an arbitrary URL via the website_url query parameter and makes a server-side HTTP request to it without any validati…

    lin-snow Ech0 github.com/lin-snow/Ech0 Go