CVE-2026-43644

CVE-2026-43644 affects podinfo up to version 6.11.2. The vulnerability is a reflected XSS in the /echo and /api/echo endpoints, caused by the echoHandler writing the request body to the response without setting explicit Content-Type or X-Content-Type-Options headers. Go’s content-type detection m...

io.spinnaker.echo:echo-api-tck (main-305), io.spinnaker.echo:echo-notifications (main-305) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-305)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-305 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-305 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (2.43.1), io.spinnaker.echo:echo-notifications (2.43.1) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (2.43.1)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version 2.43.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck 2.43.1 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (2.40.1), io.spinnaker.echo:echo-notifications (2.40.1) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (2.40.1)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version 2.40.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck 2.40.1 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (>=2026.0-19, <=2026.0-23), io.spinnaker.echo:echo-notifications (>=2026.0-19, <=2026.0-23) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (>=2026.0-19, <=2026.0-23)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-19, =2026.0-23 Source cves: CVE-2026-32613 Source advisory: GHSA-69RW-45WJ-G4V6...

io.spinnaker.echo:echo-api-tck (2.36.2), io.spinnaker.echo:echo-notifications (2.36.2) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (2.36.2)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version 2.36.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck 2.36.2 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-281), io.spinnaker.echo:echo-notifications (main-281) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-281)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-281 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-281 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (2.34.2), io.spinnaker.echo:echo-notifications (2.34.2) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (2.34.2)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version 2.34.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck 2.34.2 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (2.47.0), io.spinnaker.echo:echo-notifications (2.47.0) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (2.47.0)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version 2.47.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck 2.47.0 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-310), io.spinnaker.echo:echo-notifications (main-310) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-310)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-310 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-310 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (2.43.3), io.spinnaker.echo:echo-notifications (2.43.3) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (2.43.3)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version 2.43.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck 2.43.3 - io.spinnaker.echo:echo-notifications...

io.spinnaker.echo:echo-api-tck (main-336), io.spinnaker.echo:echo-notifications (main-336) +6 more potentially affected by CVE-2026-32613 via io.spinnaker.echo:echo-pipelinetriggers (main-336)

io.spinnaker.echo:echo-pipelinetriggers MAVEN version main-336 is affected by a known vulnerability. The following packages have a transitive dependency on io.spinnaker.echo:echo-pipelinetriggers and may be impacted: - io.spinnaker.echo:echo-api-tck main-336 - io.spinnaker.echo:echo-notifications...

CVE-2014-6212: Undefined Security Weakness

The Echo API in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix11, 10.0.0.x before 10.0.0.1 iFix12, 10.0.1.x before 10.0.1.5 iFix2, and 10.0.2.x before 10.0.2.2 iFix5; Emptoris Sourcing 9.5 before 9.5.1.3 iFix2, 10.0.0.x before 10.0.0.1 iFix1, 10.0.1.x before 10.0.1.3 iFix1, and 10.0.2...

PT-2015-3839

Name of the Vulnerable Software and Affected Versions IBM Emptoris Contract Management versions 9.5.x through 9.5.0.5, 10.0.0.x through 10.0.0.0, 10.0.1.x through 10.0.1.4, and 10.0.2.x through 10.0.2.1 IBM Emptoris Sourcing versions 9.5 through 9.5.1.2, 10.0.0.x through 10.0.0.0, 10.0.1.x throug...