Echo v4's BodyDump middleware captures entire request and response bodies without size limits by default, which can lead to excessive memory allocation. This can be exploited by clients submitting large requests or influencing large responses, potentially causing denial of service due to memory exhaustion. The vulnerability affects Echo v4 versions from 4.0.0 up to but not including 4.16.1. A patch is available in version 4.16.1 that introduces configurable limits on captured body sizes.