CVE-2026-33638
2 advisories.
Go/github.com/lin-snow/ech0 CVE-2026-33638: medium 5.3
Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint
Action: Upgrade github.com/lin-snow/ech0 to 1.4.8-0.20260322121226-acbf1fd71011 or later.
go get github.com/lin-snow/ech0@v1.4.8-0.20260322121226-acbf1fd71011Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.8-0.20260322121226-acbf1fd71011 | - |
Fixed versions
| 1.4.8-0.20260322121226-acbf1fd71011 |
Sources
- osv: GHSA-m983-7426-5hrj
- https://github.com/lin-snow/Ech0/security/advisories/GHSA-m983-7426-5hrj
- https://nvd.nist.gov/vuln/detail/CVE-2026-33638
- https://github.com/lin-snow/Ech0/commit/acbf1fd71011e6b9e1e6a911128056a19862f681
- https://github.com/lin-snow/Ech0
- https://github.com/lin-snow/Ech0/releases/tag/v4.2.0
CVE-2026-33638 · published · modified · JSON
Go/github.com/lin-snow/ech0 CVE-2026-33638: unknown
Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint in github.com/lin-snow/ech0
Action: Upgrade github.com/lin-snow/ech0 to 1.4.8-0.20260322121226-acbf1fd71011 or later.
go get github.com/lin-snow/ech0@v1.4.8-0.20260322121226-acbf1fd71011Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.8-0.20260322121226-acbf1fd71011 | - |
Fixed versions
| 1.4.8-0.20260322121226-acbf1fd71011 |
Sources
- osv: GO-2026-4838
- https://github.com/lin-snow/Ech0/security/advisories/GHSA-m983-7426-5hrj
- https://github.com/lin-snow/Ech0/commit/acbf1fd71011e6b9e1e6a911128056a19862f681
- https://github.com/lin-snow/Ech0/releases/tag/v4.2.0
CVE-2026-33638 · published · modified · JSON