https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 23 Oct 2026 04:12:03 +0000 https://cve.radiocsirt.org/vuln/cnvd-2017-23948 cnvd-2017-23948 https://cve.radiocsirt.org/vuln/cnvd-2017-23948 https://cve.radiocsirt.org/vuln/euvd-2026-76569 EUVD-2026-76569 https://cve.radiocsirt.org/vuln/euvd-2026-76569 https://cve.radiocsirt.org/vuln/fkie_cve-2017-11173 <p>Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed.</p> <p>Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-11173 https://cve.radiocsirt.org/vuln/ghsa-2j9c-9vmv-7m39 <p><strong>Affected:</strong> RubyGems: rack-cors</p> <p>Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted `example.com` domain name and not the malicious `example.net` domain name, then `example.com.example.net` (as well as `example.com-example.net`) would be inadvertently allowed.</p> <p><strong>Affected:</strong> RubyGems: rack-cors</p> <p>Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted `example.com` domain name and not the malicious `example.net` domain name, then `example.com.example.net` (as well as `example.com-example.net`) would be inadvertently allowed.</p> https://cve.radiocsirt.org/vuln/ghsa-2j9c-9vmv-7m39 https://cve.radiocsirt.org/vuln/gsd-2017-11173 gsd-2017-11173 https://cve.radiocsirt.org/vuln/gsd-2017-11173 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-11173 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-rack-cors</p> <p>Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: ruby-rack-cors</p> <p>Missing anchor in generated regex for rack-cors before 0.4.1 allows a malicious third-party site to perform CORS requests. If the configuration were intended to allow only the trusted example.com domain name and not the malicious example.net domain name, then example.com.example.net (as well as example.com-example.net) would be inadvertently allowed.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-11173