Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-16263
9.1
CRITICALCVSS v3
Published
October 28, 2020
CVSS v2
6.4 MEDIUM
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Winston 1.5.4 devices have a CORS configuration that trusts arbitrary origins. This allows requests to be made and viewed by arbitrary origins.
NPM
GitHub