Поиск уязвимостей
Количество 11
Количество 11
CVE-2026-55677
Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (preserving %2F as-is), while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls and read static files without authorization. This vulnerability is fixed in 4.15.3 and 5.2.0.
CVE-2026-55677
Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (preserving %2F as-is), while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls and read static files without authorization. This vulnerability is fixed in 4.15.3 and 5.2.0.
CVE-2026-55677
Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (preserving %2F as-is), while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls and read static files without authorization. This vulnerability is fixed in 4.15.3 and 5.2.0.
CVE-2026-55677
Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router a ...
GHSA-vfp3-v2gw-7wfq
Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files
RLSA-2026:69293
Important: osbuild-composer security update
ELSA-2026-69293
ELSA-2026-69293: osbuild-composer security update (IMPORTANT)
RLSA-2026:67148
Important: osbuild-composer security update
RLSA-2026:66432
Important: osbuild-composer security update
ELSA-2026-67148-0
ELSA-2026-67148-0: osbuild-composer security update (IMPORTANT)
ELSA-2026-66432-0
ELSA-2026-66432-0: osbuild-composer security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-55677 Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (preserving %2F as-is), while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls and read static files without authorization. This vulnerability is fixed in 4.15.3 and 5.2.0. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-55677 Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (preserving %2F as-is), while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls and read static files without authorization. This vulnerability is fixed in 4.15.3 and 5.2.0. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
 | CVE-2026-55677 Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router and static file handler disagree on URL path decoding. The router matches routes using the raw encoded path (preserving %2F as-is), while StaticDirectoryHandler unescapes %2F to / before resolving filesystem paths. This allows an attacker to bypass route-level access controls and read static files without authorization. This vulnerability is fixed in 4.15.3 and 5.2.0. | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| CVE-2026-55677 Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router a ... | CVSS3: 7.5 | 1% Низкий | 5 месяцев назад |
| GHSA-vfp3-v2gw-7wfq Echo: Encoded slash (%2F) bypasses route-level protection and exposes static files | CVSS3: 7.5 | 1% Низкий | 3 месяца назад |
 | RLSA-2026:69293 Important: osbuild-composer security update | около 2 месяцев назад | ||
| ELSA-2026-69293 ELSA-2026-69293: osbuild-composer security update (IMPORTANT) | 4 дня назад | ||
| RLSA-2026:67148 Important: osbuild-composer security update | около 2 месяцев назад | ||
| RLSA-2026:66432 Important: osbuild-composer security update | около 2 месяцев назад | ||
| ELSA-2026-67148-0 ELSA-2026-67148-0: osbuild-composer security update (IMPORTANT) | около 1 месяца назад | ||
| ELSA-2026-66432-0 ELSA-2026-66432-0: osbuild-composer security update (IMPORTANT) | около 2 месяцев назад |
Уязвимостей на страницу