Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: stefanprodan Clear all filters
TI-2026-31746 CVE-2026-43644 · GHSA-q23m-vm9r-5745

podinfo 6.11.2 Reflected XSS via /echo Endpoint

Priority MEDIUM 56

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Cont…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00195 Published 2026-05-14 Fixed in 1.8.1-0.20260519111337-cbebb20fd485 CWE-79