CVE-2026-55842

The Scoold Q&A and knowledge-sharing platform is vulnerable to a CORS wildcard origin issue in versions prior to 1.69.1 . The apiCorsConfiguration() method in src/main/java/com/erudika/scoold/ScooldServer.java incorrectly combines `addAllowedOriginPatterncovers蔚(*)