CVE-2025-50864
1 advisory.
npm/@elysiajs/cors CVE-2025-50864: medium 6.5
elysia-cors Origin Validation Error
Action: Upgrade @elysiajs/cors to 1.3.1 or later.
npm i @elysiajs/cors@1.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.1 | - |
Fixed versions
| 1.3.1 |
Sources
- osv: GHSA-f9qj-4c5x-cpcw
- https://nvd.nist.gov/vuln/detail/CVE-2025-50864
- https://github.com/elysiajs/elysia-cors/commit/9b9eb92e32a7a4b43b6d5108668941701c33e221
- https://github.com/elysiajs/elysia-cors
- https://github.com/elysiajs/elysia-cors/blob/main/src/index.ts
- https://github.com/elysiajs/elysia-cors/tree/main
- https://medium.com/@raghavagrawal_23036/cors-bypass-in-popular-opensource-library-ad27fb41e16a
- http://elysiajs.com
CVE-2025-50864 · published · modified · JSON