Skip to content
OpenAdvisories

Package · Ubuntu

golang-github-labstack-echo.v3

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-118650 Public exploit

    Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path

    Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, a globally mounted middleware.Static instance can interpret an encoded request path differently from Echo's router because the router matches the still-encoded path while the static handler uses the decod…

    labstack echo golang-github-labstack-echo golang-github-labstack-echo.v2 Ubuntu Go