Skip to content
OpenAdvisories

Vendor

stefanprodan

1 known vulnerabilities.

Products

podinfo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-43644

    podinfo 6.11.2 Reflected XSS via /echo Endpoint

    podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options head…

    stefanprodan podinfo github.com/stefanprodan/podinfo Go