https://advisories.gitlab.com/golang/github.com/lin-snow/ech0/CVE-2026-35037/
Ech0: Unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata...
CVE-2026-35037 Ech0: Unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata: The GET /api/website/title endpoint accepts...