Go/github.com/rs/cors CVE-2025-47908: high 7.5, EPSS 0.60%
Denial of service via malicious preflight requests in github.com/rs/cors
Action: Upgrade github.com/rs/cors to 1.11.0 or later.
go get github.com/rs/cors@v1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: GHSA-mh55-gqvf-xfwm
- nvd: CVE-2025-47908
- https://github.com/rs/cors/issues/170
- https://github.com/rs/cors/pull/171
- https://github.com/rs/cors/commit/4c32059b2756926619f6bf70281b91be7b5dddb2
- https://github.com/rs/cors
- https://pkg.go.dev/vuln/GO-2024-2883
CVE-2025-47908 · published · modified · JSON