tocsin

CVE-2026-35036

2 advisories.

Go/github.com/lin-snow/ech0 CVE-2026-35036: high 7.5, EPSS 0.44%

Ech0 has Unauthenticated Server-Side Request Forgery in Website Preview Feature

Action: Upgrade github.com/lin-snow/ech0 to 1.4.8-0.20260401031029-4ca56fea5ba4 or later.

go get github.com/lin-snow/ech0@v1.4.8-0.20260401031029-4ca56fea5ba4

Affected

introducedfixedlast affected
01.4.8-0.20260401031029-4ca56fea5ba4-

Fixed versions

1.4.8-0.20260401031029-4ca56fea5ba4

Sources

CVE-2026-35036 · published · modified · JSON

Go/github.com/lin-snow/ech0 CVE-2026-35036: unknown, EPSS 0.44%

Ech0 has Unauthenticated Server-Side Request Forgery in Website Preview Feature in github.com/lin-snow/ech0

Action: Upgrade github.com/lin-snow/ech0 to 1.4.8-0.20260401031029-4ca56fea5ba4 or later.

go get github.com/lin-snow/ech0@v1.4.8-0.20260401031029-4ca56fea5ba4

Affected

introducedfixedlast affected
01.4.8-0.20260401031029-4ca56fea5ba4-

Fixed versions

1.4.8-0.20260401031029-4ca56fea5ba4

Sources

CVE-2026-35036 · published · modified · JSON