Go/github.com/gorilla/handlers CVE-2017-20146: critical 9.8, EPSS 0.74%
gorilla/handlers may allow requester to bypass expected behavior of the Same Origin Policy
Action: Upgrade github.com/gorilla/handlers to 1.3.0 or later.
go get github.com/gorilla/handlers@v1.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0 | - |
Fixed versions
| 1.3.0 |
Sources
- osv: GHSA-jcr6-mmjj-pchw
- https://nvd.nist.gov/vuln/detail/CVE-2017-20146
- https://github.com/gorilla/handlers/pull/116
- https://github.com/gorilla/handlers/commit/90663712d74cb411cbef281bc1e08c19d1a76145
- https://github.com/gorilla/handlers
- https://pkg.go.dev/vuln/GO-2020-0020
CVE-2017-20146 · published · modified · JSON