nicolargo 890858944a REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

2026-07-04 17:26:38 +02:00

..

glances_restful_cors.conf

REST API CORS Credentials Guard Uses Exact-Match Instead of Membership Test — Bypassed by Any Multi-Origin Allowlist Containing the Wildcard

2026-07-04 17:26:38 +02:00

glances_xmlrpc_allowed_hosts.conf

test(xmlrpc): failing test — spoofed Host should be rejected (CVE-2026-46611)

2026-05-23 09:50:40 +02:00

glances_xmlrpc_cors.conf

XML-RPC Multi-Origin CORS Configuration Silently Falls Back to Wildcard - CVE-2026-46608

2026-05-23 11:40:20 +02:00