Download Latest Version
v5.0.4 small fixes and improvements source code.tar.gz (449.0 kB)
Get an email when there's a new version of Echo
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-02-06 | 523 Bytes | |
| v5.0.3 security (static middleware directory traversal under Windows) source code.tar.gz | 2026-02-06 | 447.3 kB | |
| v5.0.3 security (static middleware directory traversal under Windows) source code.zip | 2026-02-06 | 505.2 kB | |
| Totals: 3 Items | 953.0 kB | 0 | |
Fix directory traversal vulnerability under Windows in Static middleware when default Echo filesystem is used. Reported by @shblue21 (https://github.com/labstack/echo/pull/2891).
This applies to cases when:
- Windows is used as OS
middleware.StaticConfig.Filesystemisnil(default)echo.Filesystemis has not been set explicitly (default)
Exposure is restricted to the active process working directory and its subfolders.
Full Changelog: https://github.com/labstack/echo/compare/v5.0.2...v5.0.3
