{"action":"Upgrade github.com/jub0bs/fcors to 0.9.0 or later.","affected":[{"fixed":"0.9.0","introduced":"0"}],"component":"github.com/jub0bs/fcors","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["0.9.0"],"ghsa_id":"GHSA-v84h-653v-4pq9","id":"tcs_01M5KG2Z6KKEFG458SYRXHPNC9","modified_at":"2026-02-04T04:32:51.776553Z","published_at":"2024-05-21T15:08:01Z","references":["https://osv.dev/vulnerability/GO-2024-2812","https://github.com/jub0bs/fcors/security/advisories/GHSA-v84h-653v-4pq9","https://github.com/jub0bs/fcors/commit/b5dcb889a49def37d7d9c25deb7135f4eb45625e"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2812","url":"https://osv.dev/vulnerability/GO-2024-2812"}],"summary":"Some CORS middleware allow untrusted origins in github.com/jub0bs/fcors"}