labstack echo güvenlik açıkları
labstack
- Toplam açık
- 11
- Kritik
- 1
- Aktif istismar
- 0
- Yaması çıkan
- 3
- Son açık
- 37 dk önce
Önem dağılımı
- Kritik 1
- Yüksek 4
- Orta 6
- Düşük 0
Son açıklar
6 açık
- 5,3Orta CVE-2026-118653 Echo: Rate Limiter Bypass via Spoofed X-Forwarded-For Header in Default Configuration
- 6,1Orta CVE-2026-118652Yama var Echo: Reflected Cross-Site Scripting (XSS) via unsanitized JSONP callback in Context.JSONP / Context.JSONPBlob
- 5,3Orta CVE-2026-118651 Echo: Reverse Proxy Forwards Attacker-Supplied X-Real-IP to Upstream by Default
- 5,3Orta CVE-2026-118266Yama var Echo: CSRF Protection Bypass via MethodOverride Rewriting POST to Safe Method
- 5,3Orta CVE-2026-118265 Echo: X-Real-IP extractor trusts the header value instead of the sending peer
- 6,3Orta CVE-2026-118263 Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests