CVE-2022-31142
2 advisories.
npm/fastify-bearer-auth CVE-2022-31142: high 7.5, EPSS 1.50%
fastify-bearer-auth vulnerable to Timing Attack Vector
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.1 | - | 6.0.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-376v-xgjx-7mfr
- https://github.com/fastify/fastify-bearer-auth/security/advisories/GHSA-376v-xgjx-7mfr
- https://nvd.nist.gov/vuln/detail/CVE-2022-31142
- https://github.com/fastify/fastify-bearer-auth/commit/0c468a616d7e56126dc468150f6a5a92e530b8e4
- https://github.com/fastify/fastify-bearer-auth/commit/39353b15409ee99474545f615ffb16180cf3b716
- https://github.com/fastify/fastify-bearer-auth/commit/f921a0582dc83112039004a9b5041141b50c5b3f
- https://hackerone.com/reports/1633287
- https://github.com/fastify/fastify-bearer-auth
CVE-2022-31142 · published · modified · JSON
npm/@fastify/bearer-auth CVE-2022-31142: high 7.5, EPSS 1.50%
fastify-bearer-auth vulnerable to Timing Attack Vector
Action: Upgrade @fastify/bearer-auth to 7.0.2 or later.
npm i @fastify/bearer-auth@7.0.2npm i @fastify/bearer-auth@8.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.0.2 | - |
| 8.0.0 | 8.0.1 | - |
Fixed versions
| 7.0.2 | 8.0.1 |
Sources
- osv: GHSA-376v-xgjx-7mfr#npm/@fastify/bearer-auth
- https://github.com/fastify/fastify-bearer-auth/security/advisories/GHSA-376v-xgjx-7mfr
- https://nvd.nist.gov/vuln/detail/CVE-2022-31142
- https://github.com/fastify/fastify-bearer-auth/commit/0c468a616d7e56126dc468150f6a5a92e530b8e4
- https://github.com/fastify/fastify-bearer-auth/commit/39353b15409ee99474545f615ffb16180cf3b716
- https://github.com/fastify/fastify-bearer-auth/commit/f921a0582dc83112039004a9b5041141b50c5b3f
- https://hackerone.com/reports/1633287
- https://github.com/fastify/fastify-bearer-auth
CVE-2022-31142 · published · modified · JSON