Skip to content
OpenAdvisories

Package · npm

@koa/cors

1 known vulnerabilities.

1 result · Feed

  • High 8.6

    @koa/cors has overly permissive origin policy

    @koa/cors npm provides Cross-Origin Resource Sharing (CORS) for koa, a web framework for Node.js. Prior to version 5.0.0, the middleware operates in a way that if an allowed origin is not provided, it will return an `Access-Control-Allow-Origin` header with t…