Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2026/11/05 8:26 p.m.•8 views

CVE-2026-34157 Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

Wails is a framework for building desktop applications using Go and web technologies. From 2.0.0 until 2.13.0, BindingsAllowedOrigins in v2/internal/frontend/originvalidator/originValidator.go passes wildcard patterns to wildcardPatternToRegex, which expands every asterisk to an unrestricted...

7.6CVSS6.4AI score
SaveExploits0References6
Rows per page
Query Builder