@perfood/couch-auth Observable Timing Discrepancy Vulnerability

A timing side-channel vulnerability has been identified in the authentication logic of @perfood/couch-auth version 0.26.0. This vulnerability allows remote attackers to access sensitive information by exploiting the timing discrepancy in the authentication process, potentially leading to the guessing of sensitive tokens.

Impact

Exploitation of this vulnerability could allow attackers to perform side-channel attacks that guess sensitive tokens, which could be used to compromise user accounts or access restricted resources.