blob: 0f39fc2405f2faa8260c2271b7ea630e516e0122 [file] [log] [blame]
module: github.com/robbert229/jwt
versions:
- fixed: v0.0.0-20170426191122-ca1404ee6e83
description: |
[`Validate`] used non-constant time string comparison to
compare a provided HMAC against expected HMAC, providing
a timing side-channel.
published: 2021-04-14T12:00:00Z
symbols:
- Algorithm.validateSignature
links:
commit: https://github.com/robbert229/jwt/commit/ca1404ee6e83fcbafb66b09ed0d543850a15b654
context:
- https://github.com/robbert229/jwt/issues/12