Skip to content
OpenAdvisories

Package · Go

github.com/rs/cors

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2025-47908

    Denial of service via malicious preflight requests in github.com/rs/cors

    Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas. This behavior can be abused by attackers to produce undue loa…

    github.com/rs/cors github.com/rs/cors github.com/rs/cors golang-github-rs-cors Ubuntu Go
  • Medium 5.9
    CVE-2018-20744

    github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

    The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.

    github.com/gofiber/fiber/v2 github.com/rs/cors Go