Security: labstack/echo
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Encoded slash (%2F) bypasses route-level protection and exposes static filesGHSA-vfp3-v2gw-7wfq published
Jun 14, 2026 by vishrHigh -
Windows path traversal via backslash in middleware.Static default filesystemGHSA-pgvm-wxw2-hrv9 published
Feb 17, 2026 by vishrModerate