| Package | Affected versions | Patched versions |
|---|---|---|
| stdlib | ≥ 1.25.0, < 1.25.1 | 1.25.1 |
When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than intended. CrossOriginProtection then skips validation, but forwards the original request path, which may be served by a different handler without the intended security protections.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free