{"id":"GO-2026-5375","revision":"d02bdd1e9f144547bd4d47a5b928194b","records":[{"revision":"d02bdd1e9f144547bd4d47a5b928194b","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5375","aliases":["CVE-2026-79664","GHSA-fpw6-hrg5-q5x5"],"title":"ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI in github.com/lin-snow/ech0","description":"ech0's acess tokens with expiry=never cannot be revoked: logout panics, delete does not blacklist JTI in github.com/lin-snow/ech0","state":0,"publishedAt":"2026-06-25T18:43:19+00:00","modifiedAt":"2026-08-27T04:10:39.1799518+00:00","affected":[{"ecosystem":"Go","name":"github.com/lin-snow/ech0","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.4.8-0.20260503041146-eab62379c795"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/lin-snow/Ech0/security/advisories/GHSA-fpw6-hrg5-q5x5","https://github.com/lin-snow/Ech0/commit/eab62379c795c3f4850a9ca938ae3f27d7171541"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5375","license":"OSV · upstream source license applies","key":"osv:GO-2026-5375","identifiers":["GO-2026-5375","CVE-2026-79664","GHSA-fpw6-hrg5-q5x5"]},"retained":false,"historicalAffected":[]}],"coverage":[]}