#cors

3 stories this week · 3 this month · 5 in 6 months · mostly security

Stories per day · 30 days

4 stories, newest first · one card per story

Iceberg and Metacello requests, including push tokens, are visible to the proxy the user selects.

Fortinet says the CVSS 9.1 bug is not known exploited; fixes are 7.4.8 and 7.2.15, with no virtual patch.

Three CORS misconfigurations in Apache Storm 3.0.0 let malicious web pages from arbitrary origins read authenticated API responses.

Joomla patches CVE-2026-71573, improper CORS origin validation in CMS requests, in versions 5.4.8 and 6.1.3.

Stories tagged #cors