CVE-2020-15655 affects multiple packages. A redirected HTTP request which is observed or modified through a web extension could bypass existing CORS checks, leading to potential disclosure of cross-origin information. See references for individual vulnerability details.