CVE-2026-118650

The Echo Go web framework is vulnerable to a path bypass issue in versions prior to 4.16.0 and 5.4.0 . A globally mounted middleware.Static instance may interpret an encoded request path differently than the framework's router; specifically, the router matches the encoded path while the static ha...