CVE-2015-9238
secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two …
Published: 2018-05-31 · CVSS: Unscored
secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7