~ / search / GHSA-mjqr-5c55-g77h

GHSA-mjqr-5c55-g77h

@perfood/couch-auth has an Observable Timing Discrepancy

Source: GitHub Advisory Database (reviewed) High CVE-2025-70949

Packages

EcosystemPackageAffectedFixed in
npm @perfood/couch-auth <= 0.26.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An Observable Timing Discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel.

References

External links from the advisory. They lead to third-party sites.