TI-2018-14721 CVE-2018-20744 · GHSA-927h-x4qj-r242
The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS…
Priority LOW 28
The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS mis…