—
GO-2026-5981
Ech0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware in github.com/lin-snow/ech0
Details
Ech0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware in github.com/lin-snow/ech0
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/lin-snow/ech0
Introduced in:
0 No fixed version published yet for github.com/lin-snow/ech0 (go modules). Pin to a known-safe version or switch to an alternative.