VULNRABLE / Vulnerability / GHSA-9969-6676-49h5

GHSA-9969-6676-49h5

HIGH LOW github.com/labstack/echo/v4 GHSA

Exploit verdict: No active-exploit signal

CVSS Score
8
Severity
HIGH
EPSS
—
Source
GHSA

Summary

Echo: WebSocket proxy can retain connections and handlers after client disconnect

What this means

GHSA-9969-6676-49h5 is a high-severity vulnerability affecting github.com/labstack/echo/v4, rated CVSS 8. Published October 23, 2026.

View full advisory at GHSA →