Detections
Analytics
SCA: security update for github.com/lin-snow/Ech0 (GHSA-pj6q-4vq4-r8cg)
high Tenable Self-Hosted Container Security Plugin ID 441494
Description
Ech0 allows PUT /api/echo/like/:id unauthenticated: anonymous callers to modify any echo's fav_countSolution
Update the github.com/lin-snow/Ech0 library and its related packages to version 1.4.8-0.20260503035905-cecc2c19b590 or later.See Also
Plugin Details
Severity: High
ID: 441494
Version: Revision 1.1
Type: Local
Family: SCA Checks
Published: 5/8/2026
Updated: 5/8/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 5/7/2026
Vulnerability Publication Date: 5/7/2026