CVE-2026-118655

A flaw was found in Echo. A remote attacker can access files under guarded routes, leading to unauthorized information disclosure. This issue occurs when the static file middleware is registered globally and decodes request URL paths a second time. By sending requests containing double-encoded pa...