Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-27456
9.1
CRITICALCVSS v3
Published
February 26, 2024
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb files.
cyu/rack-cors
GitHubRack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.
GitHubRack Middleware for handling Cross-Origin Resource Sharing (CORS), which makes cross-origin AJAX possible.>= 2.0.1, < 2.0.2NVD