Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-1000236
4.4
MEDIUMCVSS v3
Published
November 19, 2019
CVSS v2
3.5 LOW
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.
NPM