PT-2026-129175

Name of the Vulnerable Software and Affected Versions Echo versions prior to 4.15.3 Echo versions prior to 5.2.0 Description The middleware.Static component double-unescapes URL paths. Because Go's net/http already decodes Request.URL.Path, the static middleware unconditionally calling...