title: Improper access control in github.com/gorilla/handlers
description: Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.
problem types: CWE 284: Improper Access Control
affected:
{
vendor: github.com/gorilla/handlers
product: github.com/gorilla/handlers
collectionURL: https://pkg.go.dev
packageName: github.com/gorilla/handlers
versions:
version: 0, lessThan: 1.3.0, status: affected, versionType: semver
programRoutines:
name: cors.ServeHTTP
defaultStatus: unaffected
}