Approved changes feed: RSS · Atom

cpe:2.3:a:secure-compare_project:secure-compare:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorSecure Compare Project (cc1a8083-ea7c-5c32-b1bd-79403b9d0453)
ProductSecure Compare (a138c583-9e93-5ecb-a077-4b705d54aec5)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-9238 vulnerable 2026-06-08 05:07:13.357587 Details available
secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.
Published: 2018-05-31T20:00:00.000Z
Updated: 2024-09-16T17:43:37.504Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.