PYSEC-2023-115

Sentry is an error tracking and performance monitoring platform. Starting in version 23.6.0 and prior to version 23.6.2, the Sentry API incorrectly returns the access-control-allow-credentials: true HTTP header if the Origin request header ends with the system.base-hostname option of Sentry...

PT-2021-8576 · Github.Com/Gorilla/Handlers +12 · Github.Com/Gorilla/Handlers +3

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns the usage of the CORS handler, which may apply improper CORS headers. This allows the requester to explicitly control the value of th...