Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #8

Medium-severity vulnerability found in labstack Echo Go framework

Original: 🚨 EUVD-2026-112464 📊 Score: 5.9/10 (CVSS v3.1) 📦 Product: Echo, Echo 🏢 Vendor: labstack 📅 Updated: 2026-10-28 📝 Echo is

A new vulnerability tracked as EUVD-2026-112464 affects the Echo web framework for Go maintained by labstack. Versions before 4.16.0 and 5.4.0 trust forwarded scheme headers from any client in Context.Scheme, which can allow attackers to spoof the scheme. The flaw carries a CVSS v3.1 score of 5.9 out of 10. Users are advised to update to 4.16.0 or 5.4.0.

Why now: Security teams are being alerted to patch Go applications built with Echo before the flaw is exploited.

labstackEchoEUVD-2026-112464Go

Open on mastodon →

Evidence

• 🚨 EUVD-2026-112464 📊 Score: 5.9/10 (CVSS v3.1) 📦 Product: Echo, Echo 🏢 Vendor: labstack 📅 Updated: 2026-10-28 📝 Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme unconditionally trusts forwarded scheme headers from any client. A client that reaches Echo… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4035355