← All advisories

High severity7.5NVD Advisory· Published Mar 5, 2026· Updated Apr 27, 2026

CVE-2025-70949

CVE-2025-70949

Description

An observable timing discrepancy in @perfood/couch-auth v0.26.0 allows attackers to access sensitive information via a timing side-channel.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
@perfood/couch-authnpm	<= 0.26.0	—

Affected products

2

@perfood/@perfood/couch Authreferences
Package: https://npmjs.com/package/@perfood/couch-auth
ghsa-coords
pkg:npm/%40perfood/couch-auth
Range: <= 0.26.0

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-mjqr-5c55-g77hghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-70949ghsaADVISORY
gist.github.com/0xHunterr/38aab644874ca9f4646524c5b01cfe5envdWEB
www.npmjs.com/package/@perfood/couch-authnvdWEB

News mentions

0

No linked articles in our index yet.