CVE-2025-45286

Published January 2nd, 2026

View on NVD ↗

CVSS v3

6.1

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

A cross-site scripting (XSS) vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

mccutchen/go-httpbin

A reasonably complete and well-tested golang port of httpbin, with zero dependencies outside the go stdlib.

GitHub

790