Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/02/19 8:15 p.m.126 views

Hono added timing comparison hardening in basicAuth and bearerAuth

Summary The basicAuth and bearerAuth middlewares previously used a comparison that was not fully timing-safe. The timingSafeEqual function used normal string equality === when comparing hash values. This comparison may stop early if values differ, which can theoretically cause small timing...

5.4AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder