—
GO-2023-1792
Insecure wildcard CORS policy in github.com/rs/cors
Quick fix
GO-2023-1792 — github.com/rs/cors: upgrade to the fixed version with the command below.
go get github.com/rs/cors@v1.5.0Details
The CORS handler actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
Are you affected?
Enter the version of the package you're using.