CVE-2026-33129

The CVE-2026-33129 entry is linked to a timing side-channel vulnerability (GHSA-26F5-8H2X-34XH) in a h3/basic auth utility. The issue resides in the requireBasicAuth function, where a password comparison uses a timing-sensitive !== operation, allowing an attacker to infer the valid password chara...