CVE-2026-118652 | Labstack Echo up to 4.15.x/5.3.x JSONP Context.JSONP/Context.JSONPBlob callback cross site scripting

A vulnerability has been found in Labstack Echo up to 4.15.x/5.3.x and classified as problematic. The impacted element is the function Context.JSONP/Context.JSONPBlob of the component JSONP. Performing a manipulation of the argument callback results in cross site scripting.

This vulnerability was named CVE-2026-118652. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More