| id: GO-2026-5531 | |
| modules: | |
| - module: github.com/lin-snow/ech0 | |
| versions: | |
| - fixed: 1.4.8-0.20260503040728-a7e8b8e84bd1 | |
| vulnerable_at: 1.4.7 | |
| summary: |- | |
| Ech0's OAuth redirect URI validation ignores path component, enables | |
| exchange-code theft in github.com/lin-snow/ech0 | |
| ghsas: | |
| - GHSA-p64j-f4x9-wq66 | |
| references: | |
| - advisory: https://github.com/lin-snow/Ech0/security/advisories/GHSA-p64j-f4x9-wq66 | |
| - web: https://github.com/lin-snow/Ech0/commit/a7e8b8e84bd1e3db090dfb720f2c6c433356b442 | |
| source: | |
| id: GHSA-p64j-f4x9-wq66 | |
| created: 2026-06-25T15:46:11.031316698-04:00 | |
| review_status: UNREVIEWED |