Advisories for Golang/Github.com/Lin-Snow/Ech0 package

GET /api/allusers is mounted as a public endpoint and returns user records without authentication. This allows remote unauthenticated user enumeration and exposure of user profile metadata.