CVE-2026-18825
Origin validation error in the connect-xcors npm package
An Origin Validation Error in the middleware of the connect-xcors npm package allows an attacker to bypass origin verification and perform a cross domain authenticated request.
CVSS 4.0 · 5.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products