HIGH7.5
GHSA-mjqr-5c55-g77h
@perfood/couch-auth has an Observable Timing Discrepancy
Details
An Observable Timing Discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/@perfood/couch-auth
Introduced in:
0No fixed version published yet for @perfood/couch-auth (npm). Pin to a known-safe version or switch to an alternative.