cbcvebase.

Cookie-Signature Project Cookie-Signature vulnerabilities

1 known vulnerability affecting cookie-signature_project/cookie-signature.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2016-1000236P4MEDIUMCVSS 4.4fixed in 1.0.62019-11-19
CVE-2016-1000236 [MEDIUM] CWE-362 CVE-2016-1000236: Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
ghsanvdosv
Cookie-Signature Project Cookie-Signature vulnerabilities | cvebase