📦 Go Zero

This CVE describes a CORS bypass vulnerability in go-zero web framework where the `isOriginAllowed` function uses `strings.HasSuffix` to validate origins, allowing malicious domains to bypass CORS res...