ECHO-9583-410E-12A5

Bulletin has no description...

ECHO-9AE3-7B2B-033A

Bulletin has no description...

ECHO-A700-C851-5103

Bulletin has no description...

ECHO-A86A-99FD-DD37

Bulletin has no description...

ECHO-D579-0150-5732

Bulletin has no description...

ECHO-531C-0DEB-1175

Bulletin has no description...

ECHO-B70B-ED87-BC2D

Bulletin has no description...

ECHO-1910-CB5A-DE37

Bulletin has no description...

ECHO-E965-ED37-DA38

Bulletin has no description...

ECHO-0C9C-8384-9544

Bulletin has no description...

ECHO-550A-0188-828B

Bulletin has no description...

ECHO-C8EF-A1B0-0B22

Bulletin has no description...

ECHO-DC11-DAA6-FC93

Bulletin has no description...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...

Race Condition

Overview Affected versions of this package are vulnerable to Race Condition due to improper synchronization in the webhook process. An attacker can cause the application to crash and become unavailable by sending concurrent requests that exploit the reuse of echo.Context objects, leading to a pan...

Gotenberg has an unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine

Summary The webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handler returns ErrAsyncProcess and Echo recycles the context back to its sync.Pool. When a concurrent request claims the recycled context, c.Reset clears the store. If the...

GHSA-R33J-C622-R6QP Gotenberg has an unauthenticated denial of service via echo.Context pool reuse in webhook async goroutine

Summary The webhook middleware spawns a goroutine that holds a reference to the request's echo.Context after the synchronous handler returns ErrAsyncProcess and Echo recycles the context back to its sync.Pool. When a concurrent request claims the recycled context, c.Reset clears the store. If the...

PT-2026-38385

Name of the Vulnerable Software and Affected Versions Gotenberg versions prior to 8.32.0 Description A flaw in the webhook middleware allows an anonymous caller to crash the process. The middleware spawns a goroutine that retains a reference to the echo.Context after the synchronous handler retur...