-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| feast | pip |
The vulnerability description explicitly mentions improper CORS configuration in the agentscope server. In web service implementations, CORS configuration is typically handled through middleware setup functions. The most probable location would be the server initialization code where CORS policies are defined. Without proper origin restrictions (e.g., using wildcard '*' or missing origin validation), this function would directly enable the described vulnerability. The confidence is high as this pattern matches common CORS misconfigurations in web frameworks like Flask/FastAPI.