Skip to content
OpenAdvisories

Package · npm

fastify-bearer-auth

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2022-31142

    Potential Timing Attack Vector in @fastify/bearer-auth

    @fastify/bearer-auth is a Fastify plugin to require bearer Authorization headers. @fastify/bearer-auth prior to versions 7.0.2 and 8.0.1 does not securely use crypto.timingSafeEqual. A malicious attacker could estimate the length of one valid bearer token. Ac…

    fastify fastify-bearer-auth @fastify/bearer-auth fastify-bearer-auth npm