TI-2026-15415 CVE-2026-18825 · GHSA-8f76-923c-xvfqOrigin validation error in the connect-xcors npm packagePriority LOW 23An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00175 · Published 2026-09-28 · No fix listed CWE-346