https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:00:49.694135+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-166520 EUVD-2026-166520 2026-10-06T16:00:49.697338+00:00 EUVD-2026-166520 https://cve.radiocsirt.org/vuln/fkie_cve-2015-9238 fkie_cve-2015-9238 2026-10-06T16:00:49.697382+00:00

secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.

 https://cve.radiocsirt.org/vuln/ghsa-h9x2-5rm7-x4gm GHSA-h9x2-5rm7-x4gm — Insecure Comparison in secure-compare 2026-10-06T16:00:49.697422+00:00

Affected: npm: secure-compare

Versions of `secure-compare` prior to 3.0.1 are affected by a vulnerability that results in the package always returning true when comparing two strings of the same length, despite differences in the contents of those strings.

## Recommendation

Upgrade to version 3.0.1 or later.

 https://cve.radiocsirt.org/vuln/gsd-2015-9238 gsd-2015-9238 2026-10-06T16:00:49.697465+00:00 gsd-2015-9238