github.com/gin-contrib/cors

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.1

CVE-2019-25211

Gin mishandles a wildcard at the end of an origin string

parseWildcardRules in Gin-Gonic CORS middleware before 1.6.0 mishandles a wildcard at the end of an origin string, e.g., https://example.community/* is allowed when the intention is that only https://example.com/* should be allowed, and http://localhost.examp…

github.com/gin-gonic/gin github.com/gin-contrib/cors golang-github-gin-contrib-cors golang-github-gin-contrib-cors Debian Ubuntu Go

Jun 28, 2024