A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00267·Published 2026-01-02·Fixed in 2.18.0CWE-80