Root has patched GHSA-cxf3-9h37-7rr8 in the github.com/labstack/echo/v4 package for Root:Go. Multiple fixed versions available.
{ "distro": "gobinary", "distro_version": "", "severity": "CRITICAL", "source": "Root" }
[ "v4.15.3-aikido.2", "v4.15.3-aikido.3" ]
"aikido.3"
true
"https://api.root.io/external/osv/ROOT-APP-GOBINARY-GHSA-cxf3-9h37-7rr8.json"
2
"v4.15.3"
[ "v4.15.3-root.io.2", "v4.15.3-root.io.3" ]
"root.io.3"