connect-xcors vulnerabilities

CVEs whose affected-version data names the connect-xcors package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-18825Medium· 5.3

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.

An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.

▾ Sunlitgithub.com/antono · connect-xcorsvia NVD

connect-xcors vulnerabilities (CVEs) · VulnSea