Go github.com/lin-snow/ech0

Name: Go github.com/lin-snow/ech0
Brand: Go

productUS

pkg:golang/github.com/lin-snow/ech0

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical4high10medium0low

updated 2026-10-26

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-35037US	—	0.72% (53rd)	Exploit	1.4.8-0.20260401031029-4ca56fea5ba4	2026-04-06	< 1.4.8-0.20260401031029-4ca56fea5ba4
CVE-2026-33638US	—OT elevated	0.64% (50th)	—	1.4.8-0.20260322121226-acbf1fd71011	2026-03-26	< 1.4.8-0.20260322121226-acbf1fd71011
CVE-2026-35036US	—	0.44% (37th)	—	1.4.8-0.20260401031029-4ca56fea5ba4	2026-04-06	< 1.4.8-0.20260401031029-4ca56fea5ba4
CVE-2026-79668US	medium5.3OT elevated	0.43% (37th)	—	1.4.8-0.20260503040728-a7e8b8e84bd1	2026-08-25	< 1.4.8-0.20260503040728-a7e8b8e84bd1
CVE-2026-79661US	medium6.5OT elevated	0.43% (36th)	—	1.4.8-0.20260503035905-cecc2c19b590	2026-08-25	< 1.4.8-0.20260503035905-cecc2c19b590
CVE-2026-79673US	medium6.5OT elevated	0.43% (36th)	—	4.4.3	2026-08-25	2 versions
CVE-2026-79660US	medium5.3	0.41% (34th)	—	1.4.8-0.20260503034700-cb8d7a997dd8	2026-08-25	< 1.4.8-0.20260503034700-cb8d7a997dd8
CVE-2026-79666US	medium6.5OT elevated	0.39% (31st)	—	4.3.5	2026-08-25	2 versions
CVE-2026-79667US	high7.6	0.32% (24th)	—	4.3.5	2026-08-25	2 versions
CVE-2026-79662US	high8.0	0.32% (24th)	—	1.4.8-0.20260503040728-a7e8b8e84bd1	2026-08-25	< 1.4.8-0.20260503040728-a7e8b8e84bd1
CVE-2026-79672US	medium5.5OT elevated	0.32% (24th)	—	4.4.3	2026-08-25	2 versions
CVE-2026-79671US	medium5.5	0.31% (23rd)	—	4.4.3	2026-08-25	2 versions
CVE-2026-79664US	high7.4	0.27% (19th)	—	1.4.8-0.20260503041146-eab62379c795	2026-08-25	< 1.4.8-0.20260503041146-eab62379c795
CVE-2026-79659US	high7.7	0.26% (17th)	—	1.4.8-0.20260503040602-091d26d2d942	2026-08-25	< 1.4.8-0.20260503040602-091d26d2d942
CVE-2026-79670US	medium4.8	0.25% (16th)	—	4.4.3	2026-08-25	2 versions
CVE-2026-79663US	medium4.8	0.25% (16th)	—	1.4.8-0.20260503035519-fd320fe3e902	2026-08-25	< 1.4.8-0.20260503035519-fd320fe3e902
CVE-2026-79669US	medium4.3OT elevated	0.21% (11th)	—	4.4.3	2026-08-25	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-862Missing Authorization6 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-1173Improper Use of Validation Framework1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs
CWE-359Exposure of Private Personal Information to an Unauthorized Actor1 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev17 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan