Stefanprodan

2 CVEs in 1 Stefanprodan product, including Podinfo. Newest: CVE-2026-43644 (2026-05-14). Severity, EPSS and public exploits for each.

Stefanprodan products with known CVEs

ProductCVEs
Podinfo2
Stefanprodan CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-43644Medium5.42026-05-14podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body c…
CVE-2025-70849Medium6.12026-02-03Arbitrary File Upload in podinfo thru 6.9.0 allows unauthenticated attackers to upload arbitrary files via crafted POST request to the /store endpoint. The app…