LabstackEcho
1 matches found
CVE-2026-25766
The CVE-2026-25766 issue affects Echo (github.com/labstack/echo/v5) on Windows, where middleware.Static uses the default filesystem and path.Clean does not treat backslashes as separators. This lets an unauthenticated attacker read files outside the static root by crafting a path that includes se...
5.3CVSS5.6AI score0.00449EPSS
Save