CORS(Cross-origin resource sharing) security risks

I'm using Spring boot to building an App with REST API. The front-end user interfere build with pure browser side tech-stack and deploy on another server.It case CORS issue.Here is my two solutions:

1. Use Nginx as proxy server for both front-end and back-end.

2. Just enable CORS for API server.

So, I want to know that is there any security risk for enabling CORS or which is the best way and why.