CVE-2026-43644

podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content directly to the response without setting explicit Content-Type or X-Content-Type-Options headers. Attackers can craft cross-origin...

ECHO-215B-CDE4-2D00

Bulletin has no description...

ECHO-7923-725C-F8C4

Bulletin has no description...

ECHO-D3F2-76A4-B677

Bulletin has no description...

ECHO-5600-E26E-FAA5

Bulletin has no description...

ECHO-D2DB-9152-3E07

Bulletin has no description...

ECHO-576F-90BE-BEEE

Bulletin has no description...

ECHO-6117-3C26-CAB6

Bulletin has no description...

ECHO-3BD2-A10B-BC48

Bulletin has no description...

ECHO-31D2-9DC5-9987

Bulletin has no description...

ECHO-168D-355F-0E59

Bulletin has no description...

ECHO-5670-7B93-1B85

Bulletin has no description...

ECHO-467B-BF69-D979

Bulletin has no description...

ECHO-9966-DA92-510A

Bulletin has no description...

ECHO-9CF7-2C5D-DCF9

Bulletin has no description...

ECHO-FE8B-BFBA-A188

Bulletin has no description...

ECHO-8EE4-7403-DC67

Bulletin has no description...

ECHO-D1FE-BE89-4158

Bulletin has no description...

ECHO-3782-FA30-3960

Bulletin has no description...

ECHO-D03E-1F78-2A94

Bulletin has no description...