LOWGo
GHSA-528q-4pgm-wvg2· CVE-2025-45286, GO-2025-3554Reflected XSS in go-httpbin due to unrestricted client control over Content-Type
Modified: 7/8/2026
package
Go/github.com/mccutchen/go-httpbin/v2
pkg:go/github.com/mccutchen/go-httpbin/v2
—Go
GO-2025-3554· CVE-2025-45286, GHSA-528q-4pgm-wvg2Reflected XSS in go-httpbin due to unrestricted client control over Content-Type in github.com/mccutchen/go-httpbin
Modified: 3/3/2026