CVE-2025-47908
Denial of service via malicious preflight requests in github.com/rs/cors
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Denial of service via malicious preflight requests in github.com/rs/cors
Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contains many commas. This behavior can be abused by attackers to produce undue load on the middleware/server as an attempt to cause a denial of service.
Reserved 2025-05-13 | Published 2025-08-06 | Updated 2025-08-07 | Assigner GoCWE-1325: Improperly Controlled Sequential Memory Allocation
@jub0bs
Support options
