-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/openshift/osin | go | < 1.0.2-0.20210113124101-8612686d6dda | 1.0.2-0.20210113124101-8612686d6dda |
Miggo AIRoot Cause AnalysisThe vulnerability stems from using insecure string comparisons in authentication checks. Both functions originally used direct equality checks (==) which have variable execution times depending on input matches. The patch replaced these with crypto/subtle.ConstantTimeCompare to ensure constant-time comparisons. The commit diff clearly shows these functions were modified to address timing vulnerabilities, and the CWE-208 classification directly matches this type of weakness.
GoGoOngoing coverage of React2Shell