TI-2026-56752 CVE-2026-82287 · GHSA-phf4-3733-pwc6
Rybbit Reflects Any Origin in CORS Responses While Allowing Credentials
Priority MEDIUM 44
Rybbit before 2.7.0 contains a CORS misconfiguration vulnerability that allows attackers to bypass origin restrictions by reflecting any request origin in Access-Control-Allow-Origin responses while credentials are enabl…