Basic Auth Connect

basic-auth-connect

Vendor: Expressjs • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2024-47178

1Expressjs

1Basic Auth Connect

Jun 17, 2026

Sep 30, 2024

8.7 HIGH· v4

5.3 MEDIUM· v3

N/A· v2

basic-auth-connect is Connect's Basic Auth middleware in its own module. basic-auth-connect < 1.1.0 uses a timing-unsafe equality comparison that can leak timing information. This issue has been fixed in basic-auth-conne...Show more