github.com/labstack/echo/v4 vulnerabilities
CVEs whose affected-version data names the github.com/labstack/echo/v4 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
GHSA-f48p-c9v4-h7xvHighEcho: BodyDump captures request and response bodies without size limits in v4
Echo: BodyDump captures request and response bodies without size limits in v4
▾ Twilightlabstack · github.com/labstack/echo/v4via GHSA
GHSA-h7wr-284f-5qvcHighEcho: Decompress permits unbounded gzip expansion in v4
Echo: Decompress permits unbounded gzip expansion in v4
▾ Twilightlabstack · github.com/labstack/echo/v4via GHSA
GHSA-cxf3-9h37-7rr8CriticalEcho: Rejected WebSocket upgrades can bypass Echo route-level access controls
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
▾ Midnightlabstack · github.com/labstack/echo/v4via GHSA
GHSA-9969-6676-49h5HighEcho: WebSocket proxy can retain connections and handlers after client disconnect
Echo: WebSocket proxy can retain connections and handlers after client disconnect
▾ Twilightlabstack · github.com/labstack/echo/v4via GHSA