Vulnerabilities
Last updated 2 hours ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
github.com/labstack/echo/v4
|
Echo has a Static Middleware Double-Unescape Path Traversal | Medium Risk 5.9 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo vulnerable to Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob | Medium Risk 6.1 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo has Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration | Medium Risk 5.3 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers | Medium Risk 5.9 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: BodyDump captures request and response bodies without size limits in v4 | High Risk 8.0 | 13 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: BodyDump captures request and response bodies without size limits in v4 in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls | Critical 9.5 | 13 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method | Medium Risk 5.3 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo has Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto | Medium Risk 4.7 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo static file middleware route protection bypass via encoded dot-dot traversal | Medium Risk 5.9 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo's middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path | High Risk 7.5 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: WebSocket proxy can retain connections and handlers after client disconnect | High Risk 8.0 | 13 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: Decompress permits unbounded gzip expansion in v4 | High Risk 8.0 | 13 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: WebSocket proxy can retain connections and handlers after client disconnect in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: Decompress permits unbounded gzip expansion in v4 in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI | Medium Risk 6.1 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default | Medium Risk 5.3 | 8 days ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
URL-encoded path bypasses route/group middleware guarding a statically-served path in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: HTTPS Redirect and HSTS Bypass via Unconditional Trust of Forwarded Scheme Headers in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo has a Static Middleware Double-Unescape Path Traversal in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Cross-Site Scripting (XSS) via unsanitized JSONP callback in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo has CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Arbitrary Scheme Injection in WWWRedirect/NonWWWRedirect Middlewares via X-Forwarded-Proto in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo static file middleware route protection bypass via encoded dot-dot traversal in github.com/labstack/echo | Unknown | 9 hours ago | 9 hours ago |
|
github.com/labstack/echo/v4
|
Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files | High Risk 7.5 | 2 months ago | 1 month ago |
|
github.com/labstack/echo/v4
|
Encoded slash (%2F) bypasses route-level protection and exposes static files in github.com/labstack/echo/v4 and github.com/labstack/echo/v5 | Unknown | 2 months ago | 2 months ago |
|
github.com/labstack/echo/v4
|
Directory traversal on Windows in github.com/labstack/echo/v4 | Unknown | 5 years ago | 2 years ago |
|
github.com/labstack/echo/v4
|
Open redirect in github.com/labstack/echo/v4 | Unknown | 4 years ago | 2 years ago |
|
github.com/labstack/echo/v4
|
Labstack Echo Open Redirect vulnerability | Critical 9.6 | 4 years ago | 2 years ago |
|
github.com/labstack/echo/v4
|
Echo vulnerable to directory traversal | Medium Risk 5.3 | 3 years ago | 2 years ago |
Page 1