CVE-2016-1000236: Timing attack vulnerability

November 19, 2019 (updated November 21, 2019)

Cookie-signature is vulnerable to timing attacks.

References

github.com/tj/node-cookie-signature/commit/39791081692e9e14aa62855369e1c7f80fbfd50e

Code Behaviors & Features

Detect and mitigate CVE-2016-1000236 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →