Information Disclosure

otpauth is vulnerable to information disclosure. The vulnerability exists through a non constant-time comparison algorithm is being used for validating a HOTP token...