Severity: Critical
CVSS Score: 9.1
rack-cors (aka Rack CORS Middleware) 2.0.1 has 0666 permissions for the .rb files.