Search vulnerabilities

Results 1

Export CSV
CVE-2024-25190

l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Products