43 matches found
GO-2026-4600 vulnerabilities
Vulnerabilities for packages: polaris, flux-operator-fips, stakater-reloader, victorialogs-fips, cert-manager-fips, grafana-operator, nova, terragrunt, flux-image-reflector-controller, grafana-fips, victoriametrics, flux-helm-controller, aws-load-balancer-controller-fips, grafana-operator-fips,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: speedtest-go, crossplane, osv-scanner, cortex, crossplane-provider-aws-kinesis, vertical-pod-autoscaler, cloud-sql-proxy, snyk-cli, step-ca, crossplane-provider-azure-sql, cri-tools, traefik, dgraph, containerd, crossplane-provider-aws-kms, flux-kustomize-controller,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: minio-operator, osv-scanner, aws-privateca-issuer, cortex, crossplane-provider-aws-kinesis, vertical-pod-autoscaler, external-dns, crossplane-provider-azure-sql, cri-tools, rancher-machine, s5cmd, traefik, kubelet-csr-approver, kine, flux-kustomize-controller, cosign...
GO-2026-5560 podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints in github.com/stefanprodan/podinfo
podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints in github.com/stefanprodan/podinfo...
CVE-2026-43644
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
Exploit for Unrestricted Upload of File with Dangerous Type in Stefanprodan Podinfo
CVE-2025-70849: Stored XSS in Podinfo Summary A security v...
podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
GHSA-Q23M-VM9R-5745 podinfo: cross-site scripting vulnerability in the /echo and /api/echo endpoints
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
CVE-2026-43644
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
CVE-2026-43644
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
CVE-2026-43644 podinfo 6.11.2 Reflected XSS via /echo Endpoint
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
EUVD-2026-30275
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
CVE-2026-43644
CVE-2026-43644 affects podinfo up to version 6.11.2. The vulnerability is a reflected XSS in the /echo and /api/echo endpoints, caused by the echoHandler writing the request body to the response without setting explicit Content-Type or X-Content-Type-Options headers. Go’s content-type detection m...
CVE-2026-43644 podinfo 6.11.2 Reflected XSS via /echo Endpoint
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
CVE-2026-43644 podinfo 6.11.2 Reflected XSS via /echo Endpoint
podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...
PT-2026-40911
Name of the Vulnerable Software and Affected Versions podinfo versions prior to 6.11.3 Description A reflected cross-site scripting issue exists in the '/echo' and '/api/echo' endpoints. The echoHandler function writes request body content directly to the response without setting explicit...
podinfo 跨站脚本漏洞
Podinfo is a Kubernetes microservice template developed by Stefan Prodan. Versions of Podinfo 6.11.2 and earlier contained a cross-site scripting vulnerability. This vulnerability stemmed from the fact that the echoHandler did not set a clear Content-Type or X-Content-Type-Options header on the...
Security-Advisories
Security Advisories Public security advisories and proof-of-c...
GHSA-FV83-X2XW-2J55 vulnerabilities
Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, smokescreen, kubernetes-dashboard-web-fips, grafana-operator, oras, nova-fips, cilium-fips, sftpgo-plugin-eventsearch, spire-server, dataplaneapi, dapr-fips, mountpoint-s3-csi-driver, osv-scanner, pluto-fips, kubewatch,...
CVE-2026-33810 vulnerabilities
Vulnerabilities for packages: fluxcd-kustomize-mutating-webhook, smokescreen, kubernetes-dashboard-web-fips, grafana-operator, oras, nova-fips, cilium-fips, sftpgo-plugin-eventsearch, spire-server, dataplaneapi, dapr-fips, mountpoint-s3-csi-driver, osv-scanner, pluto-fips, kubewatch,...