EC
Product
echo
by labstack · last CVE Oct 28, 2026
20
CVEs
0
On KEV
9.6
Max CVSS
16
New 30D
Severity mix
Critical 2High 5Medium 13Low 0
Watch

Add echo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-40083
9.6
3%
Sep 28
Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component
Affected: 4.8.0
CVE-2026-118264
New
9.1–Oct 28
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
Affected: >= 4.0.0, < 4.16.1; >= 5.0.0, < 5.4.1
Showing 2