CVE-2026-118260 — Echo: BodyDump captures request and response bodies without size limits in v4
Echo v4’s opt-in BodyDump middleware read complete request bodies into memory and retained complete response bodies without a capture limit. Repeated or concurrent large requests can exhaust process memory and cause denial of service.
CERT24