CVE-2026-79663
2 advisories.
Go/github.com/lin-snow/Ech0 CVE-2026-79663: medium 4.8, EPSS 0.25%
Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers
Action: Upgrade github.com/lin-snow/Ech0 to 1.4.8-0.20260503035519-fd320fe3e902 or later.
go get github.com/lin-snow/Ech0@v1.4.8-0.20260503035519-fd320fe3e902Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.8-0.20260503035519-fd320fe3e902 | - |
Fixed versions
| 1.4.8-0.20260503035519-fd320fe3e902 |
Sources
- osv: GHSA-3v85-fqvh-7rxf
- https://github.com/lin-snow/Ech0/security/advisories/GHSA-3v85-fqvh-7rxf
- https://github.com/lin-snow/Ech0/commit/fd320fe3e9021c8d8d284fb274775c018690520e
- https://github.com/lin-snow/Ech0
CVE-2026-79663 · published · modified · JSON
Go/github.com/lin-snow/ech0 CVE-2026-79663: unknown, EPSS 0.25%
Ech0's RSS feed renders unescaped tag names and raw-HTML markdown, stored XSS against subscribers in github.com/lin-snow/ech0
Action: Upgrade github.com/lin-snow/ech0 to 1.4.8-0.20260503035519-fd320fe3e902 or later.
go get github.com/lin-snow/ech0@v1.4.8-0.20260503035519-fd320fe3e902Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.4.8-0.20260503035519-fd320fe3e902 | - |
Fixed versions
| 1.4.8-0.20260503035519-fd320fe3e902 |
Sources
- osv: GO-2026-5100
- https://github.com/lin-snow/Ech0/security/advisories/GHSA-3v85-fqvh-7rxf
- https://github.com/lin-snow/Ech0/commit/fd320fe3e9021c8d8d284fb274775c018690520e
CVE-2026-79663 · published · modified · JSON