CERT24CVE-2026-118260 — Echo: BodyDump captures request and response bodies without size limits in v4Loading data…

CVE-2026-118260 — Echo: BodyDump captures request and response bodies without size limits in v4

Echo v4’s opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. Repeated or concurrent large requests can exhaust process memory and cause denial of service.

← Back to intelligence

CVE-2026-118260 — Echo: BodyDump captures request and response bodies without size limits in v4

Echo v4’s opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. Repeated or concurrent large requests can exhaust process memory and cause denial of service.