Critical DLA-4285-1 1 CVE

golang-github-gin-contrib-cors - security update

Published Aug 28, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	golang-github-gin-contrib-cors	1.3.1-1+deb11u1

Vulnerabilities 1

Critical 9.1

CVE-2019-25211

Gin mishandles a wildcard at the end of an origin string

parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/* is allowed when the intention is that only https://example.com/* should be allowed, and http://localhost.examp…

github.com/gin-gonic/gin github.com/gin-contrib/cors golang-github-gin-contrib-cors golang-github-gin-contrib-cors Debian Ubuntu Go

Jun 28, 2024