Affected: CleanStart: gptscript

Security vulnerability affects the gptscript package. This issue is resolved in later releases. See references for vulnerability details.

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt to cause a denial of service.

Affected: Go: github.com/rs/cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt to cause a denial of service.

govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media

Security update 5.1.1 for Multi-Linux Manager Client Tools

Affected: Ubuntu:20.04:LTS: golang-github-rs-cors, Ubuntu:22.04:LTS: golang-github-rs-cors, Ubuntu:24.04:LTS: golang-github-rs-cors, Ubuntu:25.10: golang-github-rs-cors, Ubuntu:26.04:LTS: golang-github-rs-cors

Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt to cause a denial of service.