8.7
Élevée
CVE-2024-47178 basic-auth-connect is Connect's Basic Auth middleware in its own module
Description
basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixed in basic-auth-connect 1.1.0.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| basic-auth-connect 1.1 | premières → < 1.1.0 | 1.1.0 |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification