Debian/golang-github-gorilla-handlers: critical 9.8
Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the
Action: Upgrade golang-github-gorilla-handlers to 1.3.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.0-1 | - |
Fixed versions
| 1.3.0-1 |
Sources
published · modified · JSON