5389 matches found
ECHO-C78F-06B9-AEFA
Bulletin has no description...
ECHO-A8CD-8315-0161
Bulletin has no description...
Echo 路径遍历漏洞
Echo is a set of open-source community systems developed by Veal98, where the front-end and back-end are not separated. Versions 5.0.0 to 5.0.2 of Echo have a path traversal vulnerability. This vulnerability arises from improper handling of backslashes by the middleware.Static on Windows systems,...
SUSE CVE-2026-23125
In the Linux kernel, the following vulnerability has been resolved: sctp: move SCTPCMDASSOCSHKEY right after SCTPCMDPEERINIT A null-ptr-deref was reported in the SCTP transmit path when SCTP-AUTH key initialization fails: ================================================================== KASAN:...
GHSA-PGVM-WXW2-HRV9 Echo has a Windows path traversal via backslash in middleware.Static default filesystem
Summary On Windows, Echo’s middleware.Static using the default filesystem allows path traversal via backslashes, enabling unauthenticated remote file read outside the static root. Details In middleware/static.go, the requested path is unescaped and normalized with path.Clean URL semantics...
Echo has a Windows path traversal via backslash in middleware.Static default filesystem
Summary On Windows, Echo’s middleware.Static using the default filesystem allows path traversal via backslashes, enabling unauthenticated remote file read outside the static root. Details In middleware/static.go, the requested path is unescaped and normalized with path.Clean URL semantics...
CVE-2026-25766
creationtimestamp| type| source ---|---|--- 2026-02-17 15:04:59+00:00| published-proof-of-concept| https://github.com/labstack/echo/security/advisories/GHSA-pgvm-wxw2-hrv9...
Command Validation Bypass
@anthropic-ai/claude-code is vulnerable to command validation bypass. The vulnerability is due to improper validation of piped sed operations with the echo command, which allows an attacker to bypass file write restrictions and write to sensitive directories when the “accept edits” feature is...
ECHO-58DA-C48D-AC57
Bulletin has no description...
ECHO-3E6F-5903-BE5C
Bulletin has no description...
ECHO-14FD-C2A6-6909
Bulletin has no description...
ECHO-40C1-1118-0D1F
Bulletin has no description...
ECHO-684E-7BD7-EC1E
Bulletin has no description...
ECHO-B8B8-AEAF-8522
Bulletin has no description...
ECHO-FB35-8573-FE52
Bulletin has no description...
ECHO-8045-D421-86EE
Bulletin has no description...
ECHO-8037-DF07-6304
Bulletin has no description...
ECHO-9143-8DE4-ECC3
Bulletin has no description...