VULNRABLE / Vulnerability / GHSA-h53f-rm2w-w7rg
GHSA-h53f-rm2w-w7rg
MEDIUM LOW github.com/labstack/echo/v5 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
5.5
Severity
MEDIUM
EPSS
—
Source
GHSA
Summary
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
What this means
GHSA-h53f-rm2w-w7rg is a medium-severity vulnerability affecting github.com/labstack/echo/v5, rated CVSS 5.5. Published October 23, 2026.
View full advisory at GHSA →