A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> GITHUB SECURITY ADVISORY
GHSA-528q-4pgm-wvg2
LOW
Reflected XSS in go-httpbin due to unrestricted client control over Content-Type
AFFECTED PACKAGES:
GO / github.com/mccutchen/go-httpbin/v2
< 2.18.0
Fixed in: 2.18.0
GO / github.com/mccutchen/go-httpbin
< 2.18.0
Fixed in: 2.18.0
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
AFFECTED PACKAGES:
Unknown / Unknown
49 versions affected
ALIASES:
GHSA-528q-4pgm-wvg2, GO-2025-3554
> HISTORIQUE DES MODIFICATIONS
Première apparition
02/01/2026 15:15
Source: NVD
📊
ENRICHISSEMENT
19/01/2026 17:38
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1
Dernière mise à jour: 9 months ago