Expressjs Basic Auth Connect vulnerabilities

1 vulnerability

Known vulnerabilities in Expressjs Basic Auth Connect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.7CVE-2024-47178expressjsbasic-auth-connect+1
EPSS score
0.52%
basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixed in basic-auth-connect 1.1.0.