[VULN] Security Alert for cookie-signature

[digicert-code-analysis]

Alert IDs:

• a990bb29-798d-4739-be2d-6137e6336e02

Vulnerabilities in cookie-signature

Release: 0.0.1

Total Vulnerabilities: 1

---

1. CVE-2016-1000236

Severity: MEDIUM (Score: 4.4)

Description:
Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2016-1000236

Alert ID: a990bb29-798d-4739-be2d-6137e6336e02

---