Skip to content
OpenAdvisories

Package · npm

express-basic-auth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.1
    GHSA-c35v-qwqg-87jc

    express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison

    Versions of `express-basic-auth` prior to 1.1.7 are vulnerable to Timing Attacks. The package uses native string comparison instead of a constant time string comparison, which may lead to Timing Attacks. Timing Attacks can be used to increase the efficiency o…

    express-basic-auth npm