labstack echo güvenlik açıkları
labstack
- Toplam açık
- 11
- Kritik
- 1
- Aktif istismar
- 0
- Yaması çıkan
- 3
- Son açık
- 8 dk önce
Önem dağılımı
- Kritik 1
- Yüksek 4
- Orta 6
- Düşük 0
Son açıklar
11 açık
- 5,3Orta CVE-2026-118653 Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration
- 6,1Orta CVE-2026-118652Yama var Echo: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob
- 5,3Orta CVE-2026-118651 Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default
- 7,5Yüksek CVE-2026-118650Yama var Echo: middleware.Static: `%2F`-encoded path bypasses route/group middleware guarding a statically-served path
- 5,3Orta CVE-2026-118266Yama var Echo: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method
- 5,3Orta CVE-2026-118265 Echo: X-Real-IP extractor trusts the header value instead of the sending peer
- 9,1Kritik CVE-2026-118264 Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
- 6,3Orta CVE-2026-118263 Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
- 8,2Yüksek CVE-2026-118262 Echo: WebSocket proxy can retain connections and handlers after client disconnect
- 8,2Yüksek CVE-2026-118261 Echo: Decompress permits unbounded gzip expansion in v4
- 8,2Yüksek CVE-2026-118260 Echo: BodyDump captures request and response bodies without size limits in v4