CLEANSTART-2026-NQ85094 urllib3 is an HTTP client library for Python

Security vulnerability affects the httpbin package. urllib3 is an HTTP client library for Python...

CLEANSTART-2026-HN89733 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

Security vulnerability affects the httpbin package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages...

CLEANSTART-2026-TF91225 urllib3 is an HTTP client library for Python

Security vulnerability affects the httpbin package. urllib3 is an HTTP client library for Python...

CLEANSTART-2026-QY97775 urllib3 is an HTTP client library for Python

Security vulnerability affects the httpbin package. urllib3 is an HTTP client library for Python...

CLEANSTART-2026-VQ15251 MessagePack is the serializer implementation for Python msgpack

Security vulnerability affects the httpbin package. MessagePack is the serializer implementation for Python msgpack...

CLEANSTART-2026-OV57678 MessagePack is the serializer implementation for Python msgpack

Security vulnerability affects the httpbin package. MessagePack is the serializer implementation for Python msgpack...

PT-2026-134714

Security vulnerability affects the httpbin package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels...

AWS VDP: Unauthenticated go-httpbin servers : Leads to Cookie Tossing on *.aws.dev and Open Redirect

Multiple security vulnerabilities were identified in an unauthenticated go-httpbin server instance. An endpoint was found to accept arbitrary cookie domain parameters, allowing attacker-controlled cookies to be set across subdomains of a parent domain. This caused cookies to be delivered to...

HTTPBin - Cross-Site Scripting Detection

HTTPBin contains a cross-site scripting vulnerability which can allow an attacker to execute arbitrary script. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """HTTPBin contains a cross-site scriptin...

HTTPBin Login Panel - Detect

HTTPBin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """HTTPBin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'HTTPBin Login Panel - Detect', 'description': 'HTTPBin...

HTTPBin - Cross-Site Scripting Detection

HTTPBin contains a cross-site scripting vulnerability which can allow an attacker to execute arbitrary script. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks. !/usr/bin/env python3 -- coding: utf-8 -- """HTTPBin contains a cross-site scriptin...

CVE-2025-45286

A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Duplicate Advisory: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-528q-4pgm-wvg2. This link is maintained to preserve external references. Original Description A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scrip...

EUVD-2026-0035

Duplicate Advisory: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type...

GHSA-P4F6-H8JJ-VFVF Duplicate Advisory: Reflected XSS in go-httpbin due to unrestricted client control over Content-Type

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-528q-4pgm-wvg2. This link is maintained to preserve external references. Original Description A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scrip...

CVE-2025-45286

A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

go-httpbin security vulnerabilities

go-httpbin is a port framework by Will McCutchen, an individual developer. A security vulnerability exists in go-httpbin version v2.17.1, which stems from vulnerability to cross-site scripting attacks...

CVE-2025-45286

A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2025-45286

A cross-site scripting XSS vulnerability in mccutchen httpbin v2.17.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2025-45286

A cross-site scripting (XSS) vulnerability exists in mccutchen httpbin v2.17.1 due to the improper neutralization of script-related HTML tags. This allows an attacker to execute arbitrary web scripts or HTML by providing a crafted payload via unrestricted client control over the Content-Type head...