ECHO-C5F5-4A30-A822

Bulletin has no description...

GO-2026-6293 Encoded slash (%2F) bypasses route-level protection and exposes static files in github.com/labstack/echo/v4 and github.com/labstack/echo/v5

Encoded slash %2F bypasses route-level protection and exposes static files in github.com/labstack/echo/v4 and github.com/labstack/echo/v5...

ECHO-9D66-05D6-7FC0

Bulletin has no description...

ECHO-EC93-6DA5-DCB2

Bulletin has no description...

ECHO-FACF-FEF3-54A9

Bulletin has no description...

ECHO-EBFC-8101-CE00

Bulletin has no description...

ECHO-A943-8F53-50DF

Bulletin has no description...

ECHO-CAA3-AC17-075F

Bulletin has no description...

kernel: sctp: purge outqueue on stale COOKIE-ECHO handling

A flaw was found in the Linux kernel's Stream Control Transmission Protocol SCTP implementation. This vulnerability, a use-after-free, occurs when the system processes a Stale Cookie ERROR during the setup or reconfiguration of an SCTP association. A remote attacker could exploit this by sending...

ECHO-66D7-E273-5F0F

Bulletin has no description...

ECHO-B5FE-8A22-4E2A

Bulletin has no description...

ECHO-AA38-89D5-F024

Bulletin has no description...

ALSA-2026:59737 Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64...

GHSA-VFP3-V2GW-7WFQ Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files

Summary Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls...

EUVD-2026-39800

Echo: Encoded slash %2F bypasses route-level protection and exposes static files...

Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files

Summary Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path preserving %2F as-is, while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls...

ECHO-B159-47C9-E4C0

Bulletin has no description...

ECHO-F527-DF54-BB49

Bulletin has no description...

ECHO-25A6-FC70-1477

Bulletin has no description...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179178a: Fixed out-of-bounds accesses in RX fixup The ax88179rxfixup function contains several out-of-bounds accesses that can be triggered by a malicious or defective USB device. Specifically: - The metadata array...