Expressjs Basic-Auth-Connect
1 CVEs affecting Expressjs Basic-Auth-Connect. Latest disclosed: 2024-09-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-47178 | Medium | 5.3 | 2024-09-30 | basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timi… |