TI-2026-20833 CVE-2026-25766 · GHSA-pgvm-wxw2-hrv9
Echo has a Windows path traversal via backslash in middleware.Static default filesystem
Priority MEDIUM 63
Echo is a Go web framework.
Vulnerabilities
3 records
TI-2020-18793 CVE-2020-36565 · GHSA-j453-hm5x-c46w
Directory traversal on Windows in github.com/labstack/echo/v4
Priority MEDIUM 63
Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.
TI-2022-18981 CVE-2022-40083 · GHSA-crxj-hrmp-4rwf
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the…
Priority HIGH 76
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component.