Skip to content
OpenAdvisories

Package · Go

github.com/rs/cors

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2018-20744

    github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

    The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.

    github.com/gofiber/fiber/v2 github.com/rs/cors Go