6 matches found
CVE-2026-118656
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...
Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI
Summary Echo's dedicated open-redirect guard, sanitizeURI, decides whether a redirect target is a local path by inspecting exactly two byte positions: uri0 and uri1. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does not fire and...
GHSA-V753-G4CW-JM48 Echo has Open Redirect via Control-Character Prefix Defeating sanitizeURI
Summary Echo's dedicated open-redirect guard, sanitizeURI, decides whether a redirect target is a local path by inspecting exactly two byte positions: uri0 and uri1. If the value begins with a control character such as a tab or a newline, followed by a separator pair, the guard does not fire and...
CVE-2026-118656
The Echo Go web framework is vulnerable to an Open Redirect (CWE-601) in versions prior to 4.16.0 and 5.4.0 . The vulnerability exists because the sanitizeURI function only checks the first two bytes of a redirect target to determine if it starts with an absolute-path separator. Attackers can use...
EUVD-2026-112463
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...
CVE-2026-118656 Echo: Open Redirect via Control-Character Prefix Defeating sanitizeURI
Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI checks only the first two bytes of a redirect target before deciding whether it begins with an absolute-path separator pair. When AddTrailingSlash or RemoveTrailingSlash is configured with a redirect status, a slash, TAB, separato...