Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/10/23 8:49 p.m.•4 views

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests

Impact Echo v5's BodyDump middleware captured a bounded prefix, drained the remaining request body while ignoring read errors, and then replaced the body with the captured prefix. With an outer BodyLimit, an unknown-length request such as an HTTP/1.1 chunked request, and a BodyDump capture limit...

5.8AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
•added 2026/10/23 8:48 p.m.•4 views

Echo: BodyDump captures request and response bodies without size limits in v4

Impact Echo v4's opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. A client able to submit large requests to a route using BodyDump could cause large allocations before the application handler ran. Large responses,...

5.8AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder