CVE-2022-40083: Labstack Echo

Critical severity, CVSS 9.6. EPSS: 3.2% chance of exploitation in the next 30 days.

Labstack Echo v4.8.0 was discovered to contain an open redirect vulnerability via the Static Handler component. This vulnerability can be leveraged by attackers to cause a Server-Side Request Forgery (SSRF).

Affected products

• Labstack Echo: version 4.8.0 only

Published 2022-09-28. Last modified 2026-06-17.