높음취약점 권고Go GitHub2026. 10. 27. 오후 10:29

Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins

影響: go:github.com/wailsapp/wails/v2 >= 2.0.0, < 2.13.0 → 2.13.0

Security Vulnerability Report: Wails v2 — Origin Validator Bypass via Wildcard Pattern | | | |---|---| | Product | wailsapp/wails (v2) | | Affected File | v2/internal/frontend/originvalidator/originValidator.go | | Affected Versions | All versions containing originValidator (latest as of 2026-03-26) | | CVSSv4.0 | 7.6 HIGH — CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:L/SC:L/SI:L/SA:N | | CWE | CWE-625: Permissive Regular Expression | | Platforms | Windows / Linux / macOS (all desktop target…

GitHub Advisory Database에서 읽기

CVE	CVE-2026-34157
정보원	GitHub Advisory Database
수집 시각	2026. 10. 28. 오전 06:03
데이터	Markdown　JSON

2026. 10. 27. 오후 10:29, GitHub Advisory Database에서 "Wails: wildcardPatternToRegex allows Origin bypass via suffix match in BindingsAllowedOrigins"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Go, GitHub. CVE: CVE-2026-34157.