Go/github.com/lin-snow/ech0: unknown

Ech0: ParseAcceptLanguage `_` separator bypass enables ~70x CPU amplification via Accept-Language header in i18n.Middleware in github.com/lin-snow/ech0

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5981
• https://github.com/lin-snow/Ech0/security/advisories/GHSA-mqxv-9rm6-w8qc

published 2026-07-17T19:42:05Z · modified 2026-07-21T19:15:33.339663230Z · JSON