Vulnerabilities in CORS 1.5.0