VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Sep 22, 2025· Updated Apr 15, 2026

CVE-2025-47910

CVE-2025-47910

Description

When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1478

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.