Security Advisories์ถœ์ฒ˜: GitHub Security Advisories์กฐํšŒ์ˆ˜ 4

[@perfood/couch-auth] @perfood/couch-auth has an Observable Timing Discrepancy

By GitHub
2026๋…„ 3์›” 6์ผ
**[@perfood/couch-auth] @perfood/couch-auth has an Observable Timing Discrepancy **

An Observable Timing Discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel. References https://nvd.nist.gov/vuln/detail/CVE-2025-70949 https://gist.github.com/0xHunterr/38aab644874ca9f4646524c5b01cfe5e https://github.com/perfood/couch-auth https://www.npmjs.com/package/@perfood/couch-auth https://github.com/advisories/GHSA-mjqr-5c55-g77h

---

**[devsupporter ํ•ด์„ค]**

์ด ๊ธฐ์‚ฌ๋Š” GitHub Security Advisories์—์„œ ์ œ๊ณตํ•˜๋Š” ์ตœ์‹  ๊ฐœ๋ฐœ ๋™ํ–ฅ์ž…๋‹ˆ๋‹ค. ๊ด€๋ จ ๋„๊ตฌ๋‚˜ ๊ธฐ์ˆ ์— ๋Œ€ํ•ด ๋” ์•Œ์•„๋ณด์‹œ๋ ค๋ฉด ์›๋ณธ ๋งํฌ๋ฅผ ์ฐธ๊ณ ํ•˜์„ธ์š”.