CVE-2016-1000236

CVE-2016-1000236

Node-cookie-signature before 1.0.6 is affected by a timing attack due to the type of comparison used.

Source: CVE-2016-1000236