PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/labstack/echo/v5 Echo has a Static Middleware Double-Unescape Path Traversal Medium Risk 5.9 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob Medium Risk 6.1 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration Medium Risk 5.3 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers Medium Risk 5.9 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls Critical 9.5 13 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method Medium Risk 5.3 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto Medium Risk 4.7 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests Medium Risk 6.0 13 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo static file middleware route protection bypass via encoded dot-dot traversal Medium Risk 5.9 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path High Risk 7.5 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: X-Real-IP extractor trusts the header value instead of the sending peer Medium Risk 5.3 13 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: X-Real-IP extractor trusts the header value instead of the sending peer in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo: WebSocket proxy can retain connections and handlers after client disconnect High Risk 8.0 13 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: WebSocket proxy can retain connections and handlers after client disconnect in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI Medium Risk 6.1 8 days ago 10 hours ago
github.com/labstack/echo/v5 Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default Medium Risk 5.3 8 days ago 10 hours ago
github.com/labstack/echo/v5 URL-encoded path bypasses route/group middleware guarding a statically-served path in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo has a Static Middleware Double-Unescape Path Traversal in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Cross-Site Scripting (XSS) via unsanitized JSONP callback in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo static file middleware route protection bypass via encoded dot-dot traversal in github.com/labstack/echo Unknown 10 hours ago 10 hours ago
github.com/labstack/echo/v5 Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files High Risk 7.5 2 months ago 1 month ago
github.com/labstack/echo/v5 Encoded slash (%2F) bypasses route-level protection and exposes static files in github.com/labstack/echo/v4 and github.com/labstack/echo/v5 Unknown 2 months ago 2 months ago
github.com/labstack/echo/v5 Echo has a Windows path traversal via backslash in middleware.Static default filesystem Medium Risk 5.3 8 months ago 8 months ago
github.com/labstack/echo/v5 Echo has a Windows path traversal via backslash in middleware.Static default filesystem in github.com/labstack/echo/v5 Unknown 8 months ago 8 months ago
Data courtesy of OSV.dev
Page 1