https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:26:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-337938 EUVD-2026-337938 https://cve.radiocsirt.org/vuln/euvd-2026-337938 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56764 <p>Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function. Attackers can exploit early termination of string equality checks to infer valid credentials through precise timing measurements.</p> <p>Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function. Attackers can exploit early termination of string equality checks to infer valid credentials through precise timing measurements.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56764 https://cve.radiocsirt.org/vuln/ghsa-98q5-3v5r-qvfh <p>Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function. Attackers can exploit early termination of string equality checks to infer valid credentials through precise timing measurements.</p> <p>Hono before 4.11.10 contains a timing attack vulnerability in the basicAuth and bearerAuth middlewares due to non-constant-time string comparison in the timingSafeEqual function. Attackers can exploit early termination of string equality checks to infer valid credentials through precise timing measurements.</p> https://cve.radiocsirt.org/vuln/ghsa-98q5-3v5r-qvfh https://cve.radiocsirt.org/vuln/rhsa-2026:47618 <p>grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads hono: Hono - Timing Attack in basicAuth and bearerAuth Middleware</p> <p>grafana: Grafana: Denial of Service due to excessive memory allocation via large JSON payloads hono: Hono - Timing Attack in basicAuth and bearerAuth Middleware</p> https://cve.radiocsirt.org/vuln/rhsa-2026:47618