github.com/mccutchen/go-httpbin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.1

CVE-2025-45286

Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

github.com/mccutchen/go-httpbin/v2 github.com/mccutchen/go-httpbin Go

Jan 2, 2026