Go/github.com/rs/cors CVE-2025-47908: high 7.5, EPSS 0.68%
Denial of service via malicious preflight requests in github.com/rs/cors
Action: Upgrade github.com/rs/cors to 1.11.0 or later.
go get github.com/rs/cors@v1.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.9.0 | 1.11.0 | - |
Fixed versions
| 1.11.0 |
Sources
- osv: GO-2024-2883
- nvd: CVE-2025-47908
- https://github.com/rs/cors/pull/171
- https://github.com/rs/cors/issues/170
CVE-2025-47908 · published · modified · JSON