Vulnerabilities in django-cors-headers