CVE-2026-59148: Express Wildcard Corscve-2026-59148-express-wildcard-cors
A wildcard CORS policy ('Access-Control-Allow-Origin': '*') was statically set on an HTTP response. When applied to APIs without robust authentication mechanisms in place, this broad permissiveness allows any origin to bypass the Same-Origin Policy. Cross-origin attackers could exploit this gap to perform destructive mutations or leak restricted data on beha
