tocsin

CVE-2026-79659

2 advisories.

Go/github.com/lin-snow/ech0 CVE-2026-79659: high 7.7

Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo

Action: Upgrade github.com/lin-snow/ech0 to 1.4.8-0.20260503040602-091d26d2d942 or later.

go get github.com/lin-snow/ech0@v1.4.8-0.20260503040602-091d26d2d942

Affected

introducedfixedlast affected
01.4.8-0.20260503040602-091d26d2d942-

Fixed versions

1.4.8-0.20260503040602-091d26d2d942

Sources

CVE-2026-79659 · published · modified · JSON

Go/github.com/lin-snow/ech0 CVE-2026-79659: unknown

Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo in github.com/lin-snow/ech0

Action: Upgrade github.com/lin-snow/ech0 to 1.4.8-0.20260503040602-091d26d2d942 or later.

go get github.com/lin-snow/ech0@v1.4.8-0.20260503040602-091d26d2d942

Affected

introducedfixedlast affected
01.4.8-0.20260503040602-091d26d2d942-

Fixed versions

1.4.8-0.20260503040602-091d26d2d942

Sources

CVE-2026-79659 · published · modified · JSON