CVE-2024-42368: Non Constant Time Auth Token Comparecve-2024-42368-non-constant-time-auth-token-compare
A non-constant time comparison (`==` or `!=`) is used to verify authentication tokens from request headers. An attacker can exploit this by measuring server response times to guess the valid token character-by-character. Use `crypto/subtle.ConstantTimeCompare` instead for securely comparing secrets.
