6076 matches found
ECHO-531C-0DEB-1175
Bulletin has no description...
ECHO-B70B-ED87-BC2D
Bulletin has no description...
ECHO-1910-CB5A-DE37
Bulletin has no description...
ECHO-E965-ED37-DA38
Bulletin has no description...
ECHO-0C9C-8384-9544
Bulletin has no description...
ECHO-550A-0188-828B
Bulletin has no description...
ECHO-C8EF-A1B0-0B22
Bulletin has no description...
ECHO-DC11-DAA6-FC93
Bulletin has no description...
Race Condition
Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...
Race Condition
Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...
Race Condition
Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...
Gotenberg has an unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine
Summary The webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handler returns ErrAsyncProcess and Echo recycles the context back to its sync.Pool. When a concurrent request claims the recycled context, c.Reset clears the store. If the...
Race Condition
Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...
GHSA-R33J-C622-R6QP Gotenberg has an unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine
Summary The webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handler returns ErrAsyncProcess and Echo recycles the context back to its sync.Pool. When a concurrent request claims the recycled context, c.Reset clears the store. If the...
PT-2026-38385
Name of the Vulnerable Software and Affected Versions Gotenberg versions prior to 8.32.0 Description A flaw in the webhook middleware allows an anonymous caller to crash the process. The middleware spawns a goroutine that retains a reference to the echo.Context after the synchronous handler retur...
PT-2026-41607
Summary No authentication is required to invoke PUT /api/echo/like/:id. The handler is registered on the public router group. The service increments fav count for the given echo without checking identity, without a per-user limit, and without CSRF tokens. A remote client can arbitrarily inflate...
PT-2026-41606
Summary PUT /api/echo/like/:id at internal/router/echo.go:12 is registered on PublicRouterGroup with no authentication and no rate limit. Anonymous callers increment the fav count counter on any echo including private echoes by UUID, repeat the request without deduplication, and trigger a databas...
ECHO-0EC8-B04E-F14B Kernel vulnerabilities are irrelevant in container environments.
Bulletin has no description...