TI-2025-30312 CVE-2025-47908 · GHSA-mh55-gqvf-xfwm
Denial of service via malicious preflight requests in github.com/rs/cors
Priority HIGH 72
Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas.