Product

mccutchen github.com/mccutchen/go-httpbin vulnerabilities

1 published CVE affecting mccutchen github.com/mccutchen/go-httpbin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest mccutchen github.com/mccutchen/go-httpbin CVEs

Newest publication first

CVE-2025-45286 Reflected XSS in go-httpbin due to unrestricted client control over Content-Type
Published 2026-01-02

MediumCVSS 6.1 EPSS 0.27%

A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

mccutchen github.com/mccutchen/go-httpbin vulnerabilities

Latest mccutchen github.com/mccutchen/go-httpbin CVEs

CVE-2025-45286 Reflected XSS in go-httpbin due to unrestricted client control over Content-Type