Critical severityNVD Advisory· Published Dec 27, 2022· Updated Apr 11, 2025
Improper access control in github.com/gorilla/handlers
CVE-2017-20146
Description
Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the Access-Control-Allow-Origin header, which bypasses the expected behavior of the Same Origin Policy.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/gorilla/handlersGo | < 1.3.0 | 1.3.0 |
Affected products
2- Range: 0
Patches
Vulnerability mechanics
References
5News mentions
0No linked articles in our index yet.