Operational issues with CORS

[Pavan1925]

Hi team,

There are Operational Issues with core and its dependencies.

I wanted to point out that Black Duck is flagging operational vulnerabilities with Cors due to a lack of active development. Please update the dependency packages to the latest version if any.

Any updates or plans for future development would be greatly appreciated.

Please take a look and upgrade accordingly.

[the-powerpointer]

I wanna also hook in here: We were recently forced to go away from this library with multiple projects in the company, due to these flaggings. The library is considered as "abandoned" by various scanners.
I understand that the library is so mature, that no active development needs to be done, but it would really be great, if you could publish a release occasionally, so the library is considered as "under maintenance". ( I mean, I see, that PRs coming in and get merged, so only point missing, is to publish a new release....)

[UlisesGascon]

We plan to work on the release soon (expressjs/discussions#380) so the changes are shipped and the scanners will be happier as well. 👍