Threats tagged 'ghsa-w95c-7994-ghpr'

A vulnerability in TCPDF versions prior to 6.8.0 involves the use of a loose comparison operator (!=) and the absence of a constant-time comparison function when verifying TCPDF tag hashes. This flaw could allow attackers to bypass security checks due to timing or comparison weaknesses. The issue has been fixed in version 6.8.0.