ECHO-34D9-EA37-38AF

Bulletin has no description...

ECHO-2174-C6D0-927E

Bulletin has no description...

ECHO-741D-8A38-66AB

Bulletin has no description...

ECHO-E2F6-D6A3-9113

Bulletin has no description...

ECHO-37F5-758D-067C

Bulletin has no description...

ECHO-AC84-3B8A-D924

Bulletin has no description...

ECHO-D3F0-E26D-A784

Bulletin has no description...

ECHO-7B68-C378-A5FA

Bulletin has no description...

ECHO-C4BB-E08D-6E74

Bulletin has no description...

ECHO-7F0D-4E48-5417

Bulletin has no description...

ECHO-1E9D-9CBE-8622

Bulletin has no description...

ECHO-C9B4-8303-30F9

Bulletin has no description...

ECHO-A6F1-A1C7-A609

Bulletin has no description...

ECHO-4419-6A8C-5FC6

Bulletin has no description...

ECHO-E69F-5EF2-55D4

Bulletin has no description...

ECHO-B729-AA9A-E866

Bulletin has no description...

CVE-2026-42594 Gotenberg: Unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handler returns ErrAsyncProcess and Echo recycles the context back to its sync.Pool. When a concurrent...

CVE-2026-42594 Gotenberg: Unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.32.0, the webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handler returns ErrAsyncProcess and Echo recycles the context back to its sync.Pool. When a concurrent...

CVE-2026-42594

Gotenberg CVE-2026-42594 describes an unauthenticated denial of service caused by reuse of echo.Context in the webhook async flow. Prior to 8.32.0, a goroutine holds a reference to the request context after ErrAsyncProcess, and Echo recycles the context to a pool. If a concurrent request reuses t...

podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...