| Bug | bookworm | trixie | forky | sid | Description |
|---|
| CVE-2026-118658 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.15.2 and 5.1.1, Context.Scheme ... |
| CVE-2026-118657 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.Scheme ... |
| CVE-2026-118656 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, sanitizeURI che ... |
| CVE-2026-118655 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, middleware.Stat ... |
| CVE-2026-118654 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static f ... |
| CVE-2026-118653 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. From 4.0.0 until 5.1.0, Context.RealIP fal ... |
| CVE-2026-118652 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Context.JSONP a ... |
| CVE-2026-118651 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. From 4.0.0 until 5.4.0, the Proxy middlewa ... |
| CVE-2026-118266 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's MethodOv ... |
| CVE-2026-118264 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. From 4.0.0 until 4.16.1 and 5.4.1, Echo's ... |
| CVE-2026-118262 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. From 4.15.0 until 4.16.1 and 5.4.1, Echo's ... |
| CVE-2026-118261 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in ... |
| CVE-2026-118260 | vulnerable | vulnerable | vulnerable | vulnerable | Echo is a Go web framework. From 4.0.0 until 4.16.1, Echo v4's opt-in ... |
| CVE-2026-55677 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | vulnerable | vulnerable | Echo is a Go web framework. Prior to 4.15.3 and 5.2.0, Echo's router a ... |
| CVE-2022-40083 | vulnerable (no DSA) | fixed | fixed | fixed | Labstack Echo v4.8.0 was discovered to contain an open redirect vulner ... |