5811 matches found
ECHO-7705-3FCE-FC99
Bulletin has no description...
ECHO-D251-9C22-6961
Bulletin has no description...
ECHO-4DEC-AA9E-4284
Bulletin has no description...
ECHO-D553-AFD6-D136
Bulletin has no description...
ECHO-25A3-6CBD-BABE
Bulletin has no description...
ECHO-1CCE-8D16-512E
Bulletin has no description...
ECHO-1323-54F5-145D
Bulletin has no description...
ECHO-5890-0D66-9E2E
Bulletin has no description...
ECHO-C4C8-ED80-A411
Bulletin has no description...
ECHO-47D2-DDD1-74A0
Bulletin has no description...
ECHO-7750-C349-C5E0
Bulletin has no description...
ECHO-B7BC-591C-5019
Bulletin has no description...
ECHO-5339-AD7C-F545
Bulletin has no description...
ECHO-3EB2-A6D4-7B02 The detached-tree X-mount.subdir path arrived in 2.42 (ae19f7546); our libmount has no AT_SYMLINK_NOFOLLOW, no api->subdir in hook_mount.c and no 6.15 logic. Upstream shipped 2.41.6 the same day as 2.42.3 with the other three CVEs and deliberately not this one. Debian marks trixie vulnerable but also bookworm 2.38.1, which predates the path entirely. https://security-tracker.debian.org/tracker/CVE-2026-78409
Bulletin has no description...
ECHO-B20E-705A-6D36
Bulletin has no description...
github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass...
ECHO-8E2D-935C-D158
Bulletin has no description...
ECHO-C915-E406-2ED8
Bulletin has no description...