github.com/labstack/echo/v5 vulnerabilities
CVEs whose affected-version data names the github.com/labstack/echo/v5 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
GHSA-x9ff-22gv-65f4MediumEcho: BodyDump can discard BodyLimit overflow errors for unknown-length requests
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
▾ Sunlitlabstack · github.com/labstack/echo/v5via GHSA
GHSA-cxf3-9h37-7rr8CriticalEcho: Rejected WebSocket upgrades can bypass Echo route-level access controls
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
▾ Midnightlabstack · github.com/labstack/echo/v4via GHSA
GHSA-h53f-rm2w-w7rgMedium· 5.3Echo: X-Real-IP extractor trusts the header value instead of the sending peer
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
▾ Sunlitlabstack · github.com/labstack/echo/v5via GHSA
GHSA-9969-6676-49h5HighEcho: WebSocket proxy can retain connections and handlers after client disconnect
Echo: WebSocket proxy can retain connections and handlers after client disconnect
▾ Twilightlabstack · github.com/labstack/echo/v4via GHSA