go
echo: the proxy that keeps tunneling after the upgrade is rejected
Echo shipped v4.16.1 and v5.4.1 on October 22. The headline fix is a critical flaw in its Proxy middleware: a rejected WebSocket upgrade left a raw tunnel open, and that tunnel skipped the router, so later requests on the connection went straight to the upstream without hitting route-level auth.