Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

lin-snow — Vulnerabilities & Security Advisories 20

Browse all 20 CVE security advisories affecting lin-snow. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This vulnerability aggregation page catalogs security defects specific to the vendor lin-snow, focusing on software weaknesses and product-specific flaws within their ecosystem. The dataset encompasses a range of reported security issues, covering common vulnerability classes such as code injection, buffer overflows, and unauthorized access mechanisms identified in lin-snow products over the recent historical period. Readers can utilize this resource to track the advisory history of lin-snow, analyze the frequency and severity of specific weakness types within their software lineup, or review the cumulative vulnerability profile of individual components developed by this organization. By centralizing these reports, the page facilitates a comprehensive understanding of the security posture associated with lin-snow releases, allowing developers and security professionals to identify recurring patterns and potential risks without needing to search disparate sources for isolated data points.

Top products by lin-snow: Ech0
CVE ID Title CVSS Severity Published
CVE-2026-79673 Ech0 before 4.4.3 Scope Bypass via profile:read Token — Ech0 CWE-863 6.5 Medium 2026-08-25
CVE-2026-79672 Ech0 before 4.4.3 Authentication Bypass via Comment Panel — Ech0 CWE-862 5.5 Medium 2026-08-25
CVE-2026-79671 Ech0 before 4.4.3 SSRF via DNS Resolution Bypass — Ech0 CWE-918 5.5 Medium 2026-08-25
CVE-2026-79670 Ech0 before 4.4.3 Stored XSS via SVG Upload — Ech0 CWE-434 4.8 Medium 2026-08-25
CVE-2026-79669 Ech0 before 4.4.3 Missing Authorization on System Logs — Ech0 CWE-862 4.3 Medium 2026-08-25
CVE-2026-79668 Ech0 before 4.7.3 Unauthenticated Like Endpoint Metric Inflation — Ech0 CWE-306 5.3 Medium 2026-08-25
CVE-2026-79666 Ech0 before 4.4.3 Missing Authorization via dashboard log endpoints — Ech0 CWE-862 6.5 Medium 2026-08-25
CVE-2026-79667 Ech0 before 4.4.3 Authentication Bypass via Scope Enforcement — Ech0 CWE-285 7.6 High 2026-08-25
CVE-2026-79665 Ech0 before 4.5.1 Authorization Bypass via Session Tokens — Ech0 CWE-862 8.8 High 2026-08-25
CVE-2026-79663 Ech0 before 4.7.3 Stored XSS via RSS feed tag names — Ech0 CWE-79 4.8 Medium 2026-08-25
CVE-2026-79664 Ech0 before 4.7.3 Access Token Revocation Bypass — Ech0 CWE-613 7.4 High 2026-08-25
CVE-2026-79662 Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass — Ech0 CWE-601 8.0 High 2026-08-25
CVE-2026-79660 Ech0 before 4.7.3 Email Disclosure via Public API — Ech0 CWE-200 5.3 Medium 2026-08-25
CVE-2026-79661 Ech0 before 4.7.3 Unauthenticated fav_count Modification — Ech0 CWE-770 6.5 Medium 2026-08-25
CVE-2026-79659 Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo — Ech0 CWE-918 7.7 High 2026-08-25
CVE-2026-79658 Ech0 before 5.0.1 Denial of Service via Accept-Language — Ech0 CWE-400 7.5 High 2026-08-25
CVE-2026-77151 lin-snow Ech0 crypto.go MD5Encrypt risky encryption — Ech0 CWE-327 3.7 Low 2026-08-20
CVE-2026-35037 Ech0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata — Ech0 CWE-918 7.2 High 2026-04-06
CVE-2026-35036 Ech0 Affected by Unauthenticated Server-Side Request Forgery in Website Preview Feature — Ech0 CWE-918 7.5 High 2026-04-06
CVE-2026-33638 Ech0 authenticated user-list exposed data via public `/api/allusers` endpoint — Ech0 CWE-862 5.3 Medium 2026-03-26

This page lists every published CVE security advisory associated with lin-snow. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.