CVE-2025-50864

The elysia-cors library (versions through 1.3.0 ) contains an Origin Validation Error that allows attackers to bypass Cross-Origin Resource Sharing (CORS) restrictions. The root cause is that the library performs a substring match instead of an exact match when validating supplied origins against...

PT-2025-34065

Name of the Vulnerable Software and Affected Versions: elysia-cors versions through 1.3.0 Description: An origin validation error in the elysia-cors library allows attackers to bypass Cross-Origin Resource Sharing CORS restrictions. The library incorrectly validates the supplied origin by checkin...