GHSA-9969-6676-49h5

High

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 40; of 18,232 indexed, latest versions
Container images: 36; deployed by those charts
Fix available: 2 of 2; affected packages

Echo: WebSocket proxy can retain connections and handlers after client disconnect

Carried by container images the latest versions of 40 of 18,232 indexed charts deploy, on 36 images.

Affected package	Affected versions	Fixed in	Images
github.com/labstack/echo/v4golang	v4.15.0, v4.15.1, v4.15.2, v4.15.3+2 more	4.16.1	28
github.com/labstack/echo/v5golang	v5.0.3, v5.1.0, v5.3.1, v5.4.0	5.4.1	9

OSV records: GHSA-9969-6676-49h5

Charts affected

40 by stars

Chart

Latest

Affected images

Radar Score

gotenbergmaikumori

1.29.0

1 of 1 See more

gotenberg maikumori 1.29.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.38.1	aa552cc115db	github.com/labstack/echo/v5@v5.4.0	5.4.1

Open the chart page →

9,305

yugabyteyugabyte

2026.1.2

1 of 1 See more

yugabyte yugabyte 2026.1.2

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

512

bytebasebytebase

1.1.7

1 of 1 See more

bytebase bytebase 1.1.7

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
bytebase/bytebase :latest	5e14e1a285c0	github.com/labstack/echo/v5@v5.3.1	5.4.1

Open the chart page →

325

dash0-operatordash0-operator

0.158.0

1 of 1 See more

dash0-operator dash0-operator 0.158.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/dash0hq/operator-controller :0.158.0	1fd9ee8fcbba	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

local-ailocalai

3.4.2

1 of 1 See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
quay.io/go-skynet/local-ai :latest	f1bc435659b9	github.com/labstack/echo/v4@v4.15.1	4.16.1

Open the chart page →

4,417

kubewallkubewall

0.0.23

1 of 1 See more

kubewall kubewall 0.0.23

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/kubewall/kubewall :0.0.23	d9a03cfb557b	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

545

persesperses

0.24.0

1 of 1 See more

perses perses 0.24.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
persesdev/perses :v0.55.0	bda9946544da	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

111

paperless-ngxadnoctem

0.5.1

1 of 5 See more

paperless-ngx adnoctem 0.5.1

1 of the 5 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.36.0	87c16b9f3642	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

33,726

agentareaagentarea

0.0.29

1 of 17 See more

agentarea agentarea 0.0.29

1 of the 17 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.32.1	9ef0dc5b063b	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

13,394

btrfs-nfs-csibtrfs-nfs-csi

0.4.0

1 of 7 See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

1 of the 7 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi :0.12.0	cb29d9b801a5	github.com/labstack/echo/v5@v5.3.1	5.4.1

Open the chart page →

6,425

dockyarddockyard

0.5.0

1 of 1 See more

dockyard dockyard 0.5.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/kgma74/dockyard :0.5.0	15d1d5769e91	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

2,260

relay-proxygo-feature-flag

1.57.1

1 of 1 See more

relay-proxy go-feature-flag 1.57.1

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gofeatureflag/go-feature-flag :v1.57.1	cc8a27dd4d5d	github.com/labstack/echo/v5@v5.4.0	5.4.1

Open the chart page →

jarvisjarvis

2.2.0

1 of 1 See more

jarvis jarvis 2.2.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/kj187/jarvis :2.1.0	da86a4711677	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

kubescoutkubescoute

0.1.1

1 of 1 See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	github.com/labstack/echo/v4@v4.15.0	4.16.1

Open the chart page →

1,299

go-hello-worldloafoe

0.17.0

1 of 1 See more

go-hello-world loafoe 0.17.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/go-hello-world :v2.16.0	22d94845e317	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

658

opengistobeone

1.1.6

1 of 1 See more

opengist obeone 1.1.6

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/thomiceli/opengist :1.15.1	038d47937d3b	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

904

ociregistryociregistry

1.20.0

1 of 1 See more

ociregistry ociregistry 1.20.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
quay.io/appzygy/ociregistry :1.20.0	52cfc157ed62	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

265

yugabytewenerme

2026.1.2

1 of 1 See more

yugabyte wenerme 2026.1.2

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

512

memoszekker6

0.56.0

1 of 1 See more

memos zekker6 0.56.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.31.0	24c2707ddd8f	github.com/labstack/echo/v5@v5.3.1	5.4.1

Open the chart page →

338

gotenbergadnoctem

0.6.0

1 of 1 See more

gotenberg adnoctem 0.6.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.38.1	aa552cc115db	github.com/labstack/echo/v5@v5.4.0	5.4.1

Open the chart page →

9,305

gotenbergbysamio

0.2.0

1 of 1 See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8-chromium	5da4ab7b8fe7	github.com/labstack/echo/v5@v5.4.0	5.4.1

Open the chart page →

8,512

castai-evictorcastai

0.35.151

1 of 3 See more

castai-evictor castai 0.35.151

1 of the 3 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/castai/images/evictor :v0.35.151	0dba49d30fca	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

1,118

csghubcsghub

2.6.1

1 of 35 See more

csghub csghub 2.6.1

1 of the 35 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.32.0	a9f84fb9a374	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

71,615

damap-chartdamap

0.4.0

1 of 5 See more

damap-chart damap 0.4.0

1 of the 5 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8	f29984bd1e22	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

20,973

fairwinds-insightsfairwinds-stable

10.7.2

2 of 13 See more

fairwinds-insights fairwinds-stable 10.7.2

2 of the 13 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.32.0	a9f84fb9a374	github.com/labstack/echo/v4@v4.15.4	4.16.1
temporalio/ui :2.54.1	ff0943fe532b	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

4,207

temporalgroundcover

1.13.151

1 of 2 See more

temporal groundcover 1.13.151

1 of the 2 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260929-1	f21c0eb520a9	github.com/labstack/echo/v4@v4.15.3	4.16.1

Open the chart page →

2,914

hatchet-apihatchet

0.20.0

2 of 4 See more

hatchet-api hatchet 0.20.0

2 of the 4 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	github.com/labstack/echo/v4@v4.16.0	4.16.1
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

2,561

hatchet-hahatchet

0.20.0

3 of 8 See more

hatchet-ha hatchet 0.20.0

3 of the 8 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	github.com/labstack/echo/v4@v4.16.0	4.16.1
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	github.com/labstack/echo/v4@v4.16.0	4.16.1
ghcr.io/hatchet-dev/hatchet/hatchet-engine :v0.110.5	185c4311d23f	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

9,829

hatchet-stackhatchet

0.20.0

3 of 8 See more

hatchet-stack hatchet 0.20.0

3 of the 8 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	github.com/labstack/echo/v4@v4.16.0	4.16.1
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	github.com/labstack/echo/v4@v4.16.0	4.16.1
ghcr.io/hatchet-dev/hatchet/hatchet-engine :v0.110.5	185c4311d23f	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

9,829

memoshelmforge

2.0.3

1 of 2 See more

memos helmforge 2.0.3

1 of the 2 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.31.0	24c2707ddd8f	github.com/labstack/echo/v5@v5.3.1	5.4.1

Open the chart page →

593

temporalhelmforge

1.1.1

2 of 4 See more

temporal helmforge 1.1.1

2 of the 4 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.32.1	9ef0dc5b063b	github.com/labstack/echo/v4@v4.15.4	4.16.1
temporalio/ui :2.56.0	66d55d383bfb	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

2,774

paperlesshp

0.1.2

1 of 5 See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.34	67097317623a	github.com/labstack/echo/v4@v4.15.2	4.16.1

Open the chart page →

42,418

kbot-self-hostedkbot-self-hosted

0.1.8

1 of 7 See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
gotenberg/gotenberg :8.30	206a6c708fc6	github.com/labstack/echo/v4@v4.15.1	4.16.1

Open the chart page →

44,528

kubecheckskubechecks

3.1.0

1 of 1 See more

kubechecks kubechecks 3.1.0

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/zapier/kubechecks :latest	74bc8499cc99	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

961

memosmt190502

7.3.2

1 of 3 See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.26.2	3eefcc231141	github.com/labstack/echo/v5@v5.0.3	5.4.1

Open the chart page →

3,364

perses-operatorperses

0.5.0

1 of 2 See more

perses-operator perses 0.5.0

1 of the 2 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
persesdev/perses-operator :v0.5.0	8f8d7b09caef	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

915

persesquench-perses

0.0.16

1 of 1 See more

perses quench-perses 0.0.16

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/persesdigest-pinned	623a6b3b078a	github.com/labstack/echo/v4@v4.16.0	4.16.1

Open the chart page →

vikunjaquench-vikunja

0.0.18

1 of 1 See more

vikunja quench-vikunja 0.0.18

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
ghcr.io/quenchworks/images/vikunjadigest-pinned	9275c60a0240	github.com/labstack/echo/v4@v4.15.4 github.com/labstack/echo/v5@v5.3.1	4.16.1 5.4.1

Open the chart page →

795

memorubxkube

1.2.1

1 of 1 See more

memo rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.29	3e1253477066	github.com/labstack/echo/v5@v5.1.0	5.4.1

Open the chart page →

1,260

yugabytewener

2026.1.2

1 of 1 See more

yugabyte wener 2026.1.2

1 of the 1 container images this version deploys carry GHSA-9969-6676-49h5.

Container image	Digest	Package	Fixed in
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	github.com/labstack/echo/v4@v4.15.4	4.16.1

Open the chart page →

512

Container images carrying it

36 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
yugabytedb/yugabyte :2026.1.2.0-b137	b6dba322c734	github.com/labstack/echo/v4@v4.15.4	4.16.1	3
ghcr.io/hatchet-dev/hatchet/hatchet-admin :v0.110.5	7c233e606095	github.com/labstack/echo/v4@v4.16.0	4.16.1	3
ghcr.io/hatchet-dev/hatchet/hatchet-api :v0.110.5	be06a6b88299	github.com/labstack/echo/v4@v4.16.0	4.16.1	3
gotenberg/gotenberg :8.38.1	aa552cc115db	github.com/labstack/echo/v5@v5.4.0	5.4.1	2
neosmemo/memos :0.31.0	24c2707ddd8f	github.com/labstack/echo/v5@v5.3.1	5.4.1	2
temporalio/admin-tools :1.32.1	9ef0dc5b063b	github.com/labstack/echo/v4@v4.15.4	4.16.1	2
temporalio/admin-tools :1.32.0	a9f84fb9a374	github.com/labstack/echo/v4@v4.15.4	4.16.1	2
ghcr.io/hatchet-dev/hatchet/hatchet-engine :v0.110.5	185c4311d23f	github.com/labstack/echo/v4@v4.16.0	4.16.1	2
bytebase/bytebase :latest	5e14e1a285c0	github.com/labstack/echo/v5@v5.3.1	5.4.1	1
gofeatureflag/go-feature-flag :v1.57.1	cc8a27dd4d5d	github.com/labstack/echo/v5@v5.4.0	5.4.1	1
gotenberg/gotenberg :8.30	206a6c708fc6	github.com/labstack/echo/v4@v4.15.1	4.16.1	1
gotenberg/gotenberg :8-chromium	5da4ab7b8fe7	github.com/labstack/echo/v5@v5.4.0	5.4.1	1
gotenberg/gotenberg :8.34	67097317623a	github.com/labstack/echo/v4@v4.15.2	4.16.1	1
gotenberg/gotenberg :8.36.0	87c16b9f3642	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
gotenberg/gotenberg :8 :8.37.0	f29984bd1e22	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
neosmemo/memos :0.29	3e1253477066	github.com/labstack/echo/v5@v5.1.0	5.4.1	1
neosmemo/memos :0.26.2	3eefcc231141	github.com/labstack/echo/v5@v5.0.3	5.4.1	1
persesdev/perses :v0.55.0	bda9946544da	github.com/labstack/echo/v4@v4.16.0	4.16.1	1
persesdev/perses-operator :v0.5.0	8f8d7b09caef	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
temporalio/ui :2.56.0	66d55d383bfb	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
temporalio/ui :2.54.1	ff0943fe532b	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
ghcr.io/castai/images/evictor :v0.35.151	0dba49d30fca	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
ghcr.io/dash0hq/operator-controller :0.158.0	1fd9ee8fcbba	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
ghcr.io/erikmagkekse/btrfs-nfs-csi :0.12.0	cb29d9b801a5	github.com/labstack/echo/v5@v5.3.1	5.4.1	1
ghcr.io/haedalwang/kubescout :0.1.1	07d51f838f0d	github.com/labstack/echo/v4@v4.15.0	4.16.1	1
ghcr.io/kgma74/dockyard :0.5.0	15d1d5769e91	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
ghcr.io/kj187/jarvis :2.1.0	da86a4711677	github.com/labstack/echo/v4@v4.16.0	4.16.1	1
ghcr.io/kubewall/kubewall :0.0.23	d9a03cfb557b	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
ghcr.io/loafoe/go-hello-world :v2.16.0	22d94845e317	github.com/labstack/echo/v4@v4.16.0	4.16.1	1
ghcr.io/quenchworks/images/perses	623a6b3b078a	github.com/labstack/echo/v4@v4.16.0	4.16.1	1
ghcr.io/quenchworks/images/vikunja	9275c60a0240	github.com/labstack/echo/v4@v4.15.4 github.com/labstack/echo/v5@v5.3.1	4.16.1 5.4.1	1
ghcr.io/thomiceli/opengist :1.15.1	038d47937d3b	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
ghcr.io/zapier/kubechecks :latest	74bc8499cc99	github.com/labstack/echo/v4@v4.16.0	4.16.1	1
public.ecr.aws/groundcovercom/temporalio/admin-tools :1.29.7-20260929-1	f21c0eb520a9	github.com/labstack/echo/v4@v4.15.3	4.16.1	1
quay.io/appzygy/ociregistry :1.20.0	52cfc157ed62	github.com/labstack/echo/v4@v4.15.4	4.16.1	1
quay.io/go-skynet/local-ai :latest	f1bc435659b9	github.com/labstack/echo/v4@v4.15.1	4.16.1	1