mccutchen vulnerabilities

Products

• github.com/mccutchen/go-httpbin 1

Latest mccutchen CVEs

Newest publication first

1. CVE-2025-45286 Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

   Published 2026-01-02

   Medium·CVSS 6.1 EPSS 0.27%

   A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.