CVE-2025-47908 Denial of service via malicious preflight requests in github.com/rs/cors

[
  {
    "vendor": "github.com/rs/cors",
    "product": "github.com/rs/cors",
    "collectionURL": "https://pkg.go.dev",
    "packageName": "github.com/rs/cors",
    "versions": [
      {
        "version": "1.9.0",
        "lessThan": "1.11.0",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "programRoutines": [
      {
        "name": "Cors.handlePreflight"
      },
      {
        "name": "Cors.areHeadersAllowed"
      },
      {
        "name": "New"
      },
      {
        "name": "splitHeaderValues"
      },
      {
        "name": "AllowAll"
      },
      {
        "name": "Cors.HandlerFunc"
      },
      {
        "name": "Cors.ServeHTTP"
      },
      {
        "name": "Default"
      }
    ],
    "defaultStatus": "unaffected"
  }
]