MEDIUM6.3PyPI
GHSA-q78p-hj9h-5466· CVE-2026-53656, PYSEC-2026-3465FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Modified: 7/23/2026
package
PyPI/fiftyone
pkg:pypi/fiftyone
MEDIUM6.3PyPI
PYSEC-2026-3465· CVE-2026-53656, GHSA-q78p-hj9h-5466FiftyOne App server uses wildcard CORS (Access-Control-Allow-Origin: *), enabling cross-origin reads of local server data
Modified: 7/23/2026