Skip to content
Threat Feed
Subscribe

Product

Copilot-Api

1 brief RSS
medium advisory

ericc-ch copilot-api Permissive Cross-Domain Policy Vulnerability (CVE-2026-6662)

CVE-2026-6662 is a vulnerability in ericc-ch copilot-api up to 0.7.0, specifically in the cors function of src/server.ts, leading to a permissive cross-domain policy that can be remotely exploited for cross-domain attacks.

copilot-api CORS Cross-Site Scripting API Vulnerability
2r 1t 1c 2i