{"action":"Upgrade github.com/rs/cors to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"}],"component":"github.com/rs/cors","cve_ids":["CVE-2018-20744"],"ecosystem":"Go","epss":0.00717,"exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-927h-x4qj-r242","id":"tcs_01M5KFZ83A6JVNJBS4M9VNYMJV","modified_at":"2024-05-20T16:03:47Z","published_at":"2023-06-08T18:30:06Z","references":["https://osv.dev/vulnerability/GO-2023-1792","https://github.com/rs/cors/pull/57","https://github.com/rs/cors/issues/55"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GO-2023-1792","url":"https://osv.dev/vulnerability/GO-2023-1792"},{"source":"nvd","source_id":"CVE-2018-20744","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20744"}],"summary":"Insecure wildcard CORS policy in github.com/rs/cors"}