ghsa:GHSA-H53F-RM2W-W7RG: github.com/labstack/echo/v5 >= 5.0.0, < 5.4.1

Affected technology

github.com/labstack/echo/v5 · >= 5.0.0, < 5.4.1
Vendor not specified by the source

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Exploitation requires that the attacker can reach Echo directly or that an intervening proxy passes through the attacker's `X-Real-IP` value. Source advisory’s CVSS 3.1 assessment rates confidentiality and availability impact as none; integrity impact as low.