Gorillatoolkit Handlers — known CVE vulnerabilities
Every CVE whose affected-product data names Gorillatoolkit Handlers, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (1)
CVE-2017-20146 — CVSS 9.8 (critical): Usage of the CORS handler may apply improper CORS headers, allowing the requester to explicitly control the value of the…