Known Vulnerabilities for Go Cors by Go Cors Project
Listed below are 1 of the newest known vulnerabilities associated with "Go Cors" by "Go Cors Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-74881 json | openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard and allow_credentials enabled to true... | Not Provided | 2026-08-17 | 2026-08-17 |
| CVE-2026-72776 json | AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent... | Not Provided | 2026-08-13 | 2026-08-14 |
| CVE-2026-70604 json | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.10, 40.... | Not Provided | 2026-08-05 | 2026-08-05 |
| CVE-2026-70480 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.34 until 0.11.0, Open WebUI re... | Not Provided | 2026-08-04 | 2026-08-05 |
| CVE-2026-69207 json | Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.34, the built-in CORS mid... | Not Provided | 2026-08-07 | 2026-08-10 |
| CVE-2026-66746 json | Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrar... | Not Provided | 2026-07-28 | 2026-07-29 |
| CVE-2026-66005 json | Jan through 0.8.4, fixed in commit 3e1c1e7, contains a CORS misconfiguration vulnerability in its local API server that allow... | Not Provided | 2026-07-24 | 2026-07-25 |
| CVE-2026-65895 json | Grav API Plugin versions before 1.0.10 fail to restrict write access to security-critical plugin configuration scopes, allowi... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-65310 json | ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data and configuratio... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-62387 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.0-rc.16 shipped Access-Control-Allow-Origin: * as its default CORS c... | Not Provided | 2026-07-17 | 2026-07-17 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Go Cors Project | Go Cors | 1.7.0 | |||
| Application | Go Cors Project | Go Cors | 1.6.0 | |||
| Application | Go Cors Project | Go Cors | 1.5.0 | |||
| Application | Go Cors Project | Go Cors | 1.4.0 | |||
| Application | Go Cors Project | Go Cors | 1.3.0 | |||
| Application | Go Cors Project | Go Cors | 1.2 | |||
| Application | Go Cors Project | Go Cors | 1.1 | |||
| Application | Go Cors Project | Go Cors | 1.0 |