| Package | Affected versions | Patched versions |
|---|---|---|
| basic-auth-connect | < 1.1.0 | 1.1.0 |
| basic-auth-connect | < 1.1.0 | 1.1.0 |
basic-auth-connect <1.1.0 uses a timing-unsafe equality comparison that can leak timing information
this issue has been fixed in basic-auth-connect 1.1.0
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free