Description
An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @perfood/couch-auth | <= 0.26.0 | — | GHSA-mjqr-5c55-g77h |