npm/@koa/cors CVE-2023-49803: high 8.6, EPSS 0.28%
Overly permissive origin policy
Action: Upgrade @koa/cors to 5.0.0 or later.
npm i @koa/cors@5.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.0 | - |
Fixed versions
| 5.0.0 |
Sources
- osv: GHSA-qxrj-hx23-xp82
- https://github.com/koajs/cors/security/advisories/GHSA-qxrj-hx23-xp82
- https://nvd.nist.gov/vuln/detail/CVE-2023-49803
- https://github.com/koajs/cors/commit/f31dac99f5355c41e7d4dd3c4a80c5f154941a11
- https://github.com/koajs/cors
CVE-2023-49803 · published · modified · JSON