VDB
KO

GO-2026-5375

ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI in github.com/lin-snow/ech0

Details

ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI in github.com/lin-snow/ech0

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/lin-snow/ech0
Introduced in: 0 Fixed in: 1.4.8-0.20260503041146-eab62379c795
Fix go get github.com/lin-snow/ech0@v1.4.8-0.20260503041146-eab62379c795

References