cors

Records14

1. closed3.4
   vLLM CVE-2026-115917: vLLM permissive CORS configuration vulnerability

   Patch now · Disclosed · ●Patched · since 26 Oct 2026 · updated 28 Oct 2026 · CVE-2026-115917

   AI
2. closed6.9
   Flowise CVE-2026-56277: Flowise text-to-speech endpoint suffers from improper CORS configuration

   Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-56277

   AI
3. closed
   Flowise Flowise hardcoded CORS wildcard on TTS endpoint

   Patch now · Disclosed · since 20 May 2026

   AI
4. closed
   Open WebUI Open WebUI CORS misconfiguration and session validation issue

   Patch now · Disclosed · since 11 May 2026

   AI
5. closed6.1
   MCP SDKs CVE-2026-34237: Hardcoded Wildcard CORS Vulnerability in MCP Java SDK

   Patch now · Disclosed · since 31 Mar 2026 · CVE-2026-34237

   AI
6. closed7.5
   AnythingLLM CVE-2026-32617: Authentication bypass and loose CORS in AnythingLLM

   Patch now · Disclosed · since 16 Mar 2026 · CVE-2026-32617

   AI
7. closed9.1
   Dify CVE-2025-63386: CORS misconfiguration vulnerability in Dify setup endpoint

   Patch now · Disclosed · since 18 Dec 2025 · CVE-2025-63386

   AI
8. closed9.4
   Langflow CVE-2025-34291: Langflow Chained Account Takeover and RCE

   Patch now · Disclosed · since 5 Dec 2025 · updated 6 Dec 2025 · CVE-2025-34291

   AI
9. closed8.1
   claude-code-router CVE-2025-57755: claude-code-router CORS Misconfiguration API Key Exposure

   Patch now · Disclosed · since 21 Aug 2025 · CVE-2025-57755

   AI
10. closed3.7
    Gradio CVE-2025-5320: Gradio CORS Origin Validation Bypass Vulnerability

    Patch now · Disclosed · since 29 May 2025 · CVE-2025-5320

    AI
11. closed5.4
    Gradio CVE-2024-47165: Gradio CORS origin validation accepts null origin

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47165

    AI
12. closed8.8
    Gradio CVE-2024-47084: Gradio lacks CORS origin validation when cookies are present

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47084

    AI
13. closed8.7
    Flowise CVE-2024-36421: Flowise CORS misconfiguration vulnerability

    Patch now · Disclosed · since 5 Aug 2024 · updated 5 Aug 2024 · CVE-2024-36421

    AI
14. closed7.6
    LoLLMs CVE-2024-4499: CORS-related CSRF vulnerability in lollms XTTS server

    Patch now · Disclosed · since 24 Jun 2024 · CVE-2024-4499

    AI