CVE-2026-48089: Echo Unvalidated Path Param To Urlcve-2026-48089-echo-unvalidated-path-param-to-url
An unvalidated Echo path parameter is interpolated directly into a path-like format string. If this string dictates downstream requests or file paths, attackers can leverage path traversal sequences (e.g. `../`) to manipulate endpoint boundaries, leading to Path Traversal or Server-Side Request Forgery risks. Ensure context parameters are validated against e
