{"action":"Upgrade github.com/jub0bs/fcors to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"github.com/jub0bs/fcors","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-v84h-653v-4pq9","id":"tcs_01M5KFNS0FQ6RP84NPJE8BBQZM","modified_at":"2026-02-04T03:34:24.057878Z","published_at":"2024-05-03T17:34:21Z","references":["https://osv.dev/vulnerability/GHSA-v84h-653v-4pq9","https://github.com/jub0bs/fcors/security/advisories/GHSA-v84h-653v-4pq9","https://github.com/jub0bs/fcors/commit/08d85c149a418a583315cee066d4a35cc817219d","https://github.com/jub0bs/fcors/commit/b5dcb889a49def37d7d9c25deb7135f4eb45625e","https://github.com/jub0bs/fcors"],"severity":{"label":"critical","score":9.3},"sources":[{"source":"osv","source_id":"GHSA-v84h-653v-4pq9","url":"https://osv.dev/vulnerability/GHSA-v84h-653v-4pq9"}],"summary":"Some CORS middleware allow untrusted origins"}