A security vulnerability was discovered in the constant-time-js JavaScript library, a demonstration tool for side-channel attack prevention. Researcher Yayu Wang reported that the library's conditional-selection functions contained a side-channel flaw undermined by V8 runtime optimizations, which the author patched in version 0.5.0 and disclosed via CVE.