VDB
KO

GO-2026-5259

Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0

Details

Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/lin-snow/ech0
Introduced in: 0 Fixed in: 1.4.8-0.20260503040602-091d26d2d942
Fix go get github.com/lin-snow/ech0@v1.4.8-0.20260503040602-091d26d2d942

References