Executive brief
Podinfo affected by Arbitrary File Upload that leads to Stored Cross-Site Scripting (XSS) in github.com/stefanprodan/podinfo
Affected products
- Go github.com/stefanprodan/podinfo
Junglewise Threat Intelligence
CVE-2025-70849: GO-2026-4404 - Podinfo affected by Arbitrary File Upload that leads to Stored Cross-Site Scripting (XSS) in github.com/stefanprodan/podinfo
CVE-2025-70849 · Severity: low · CVSS 3.1 · Published 2026-02-05
Vendors: Go.