Vulnerability index

Browse CVEs

3 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

Echo MEDIUM 5.3

CVE-2026-25766

Echo is a Go web framework. In versions 5.0.0 through 5.0.2 on Windows, Echo’s `middleware.Static` using the default filesystem allows path traversal…

Fix: 5.0.3+

Fix from $1,600 2026-02-19

Echo MEDIUM 5.3

CVE-2020-36565

Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files out…

Fix: 4.2.0+

Fix from $1,600 2022-12-07

Echo CRITICAL 9.6

CVE-2022-40083

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged b…

Patch available

Fix from $2,300 2022-09-28