Go/github.com/stefanprodan/podinfo CVE-2025-70849: medium 6.1, EPSS 0.28%
Podinfo affected by Arbitrary File Upload that leads to Stored Cross-Site Scripting (XSS)
Action: Upgrade github.com/stefanprodan/podinfo to 1.8.1-0.20260314125853-83deb7fcb742 or later.
go get github.com/stefanprodan/podinfo@v1.8.1-0.20260314125853-83deb7fcb742Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.1-0.20260314125853-83deb7fcb742 | - |
Fixed versions
| 1.8.1-0.20260314125853-83deb7fcb742 |
Sources
- osv: GHSA-mw8w-q3f7-2v85
- https://nvd.nist.gov/vuln/detail/CVE-2025-70849
- https://github.com/stefanprodan/podinfo/pull/463
- https://github.com/stefanprodan/podinfo/commit/83deb7fcb7421f2d01eeb7475b18d72f16084aed
- https://gist.github.com/kazisabu/27f3e272f474005001a9ecd2c258dbea
- https://github.com/stefanprodan/podinfo
- https://github.com/stefanprodan/podinfo/releases/tag/6.11.1
CVE-2025-70849 · published · modified · JSON