Vulnerabilities in CORS 1.4.0