Echo has a Windows path traversal via backslash in middleware.Static default filesystem
On Windows, Echo’s middleware.Static using the default filesystem allows path traversal via backslashes, enabling unauthenticated remote file read outside the static root.