Validate API tokens in constant time#25781

Merged

Isotr0py merged 2 commits intovllm-project:mainfrom

russellb:ghsa-wr9h-g72x-mwhm

Sep 27, 2025

Commits on Sep 26, 2025

fix timing attack in authentication

NiuBlibing
authored and
russellb
committed
Hash tokens before comparing them
russellb
committed