critical9.8
CVE-2025-61163
Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains.
Impact
Cohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with untrusted domains. This occurs via the server failing to validate the Origin header of incoming connection requests.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.