https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:51:40.523076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-228861 EUVD-2026-228861 2026-10-03T13:51:40.586965+00:00 EUVD-2026-228861 https://cve.radiocsirt.org/vuln/fkie_cve-2017-20146 fkie_cve-2017-20146 2026-10-03T13:51:40.587000+00:00

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

 https://cve.radiocsirt.org/vuln/ghsa-jcr6-mmjj-pchw GHSA-jcr6-mmjj-pchw — gorilla/handlers may allow requester to bypass expected behavior of the Same Origin Policy 2026-10-03T13:51:40.587032+00:00

Affected: Go: github.com/gorilla/handlers

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.

 https://cve.radiocsirt.org/vuln/gsd-2017-20146 gsd-2017-20146 2026-10-03T13:51:40.587056+00:00 gsd-2017-20146 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-20146 UBUNTU-CVE-2017-20146 2026-10-03T13:51:40.587068+00:00

Affected: Ubuntu:16.04:LTS: golang-github-gorilla-handlers, Ubuntu:18.04:LTS: golang-github-gorilla-handlers

Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.