# CWE-208. Every Advisory and CVE whose sources give the weakness CWE-208, newest first. ## Records, newest first (an older page) - [Hono added timing comparison hardening in basicAuth and bearerAuth](https://agentprime.io/advisories/GHSA-gq3j-xvxp-8hrf.md) `GHSA-gq3j-xvxp-8hrf`, `CVE-2026-56764` · npm `hono`: affected `<4.11.10`, fixed in `4.11.10` · CVSS 6.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: CWE-208 - [Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability](https://agentprime.io/advisories/GHSA-c4qc-4q9p-m9q9.md) `GHSA-c4qc-4q9p-m9q9`, `CVE-2026-23901` · Maven `org.apache.shiro:shiro-core`: affected `<2.1.0`, fixed in `2.1.0` · CVSS 1.0 Low · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-208 - [Trilium Notes has a Timing Attack Vulnerability in /api/login/sync](https://agentprime.io/advisories/CVE-2025-68621.md) `CVE-2025-68621` · CVE record: TriliumNext Trilium · CVSS 7.4 High · Not analysed yet · Published 6 Feb 2026 · Tags: CWE-208 - [PrestaShop affected by time based enumeration in FO login form](https://agentprime.io/advisories/GHSA-67v7-3g49-mxh2.md) `GHSA-67v7-3g49-mxh2`, `CVE-2026-25597`, `PKSA-b6pc-d5t4-9nqt` · Packagist `prestashop/prestashop`: affected `<8.2.4 || >=9.0.0-alpha.1, <9.0.3`, fixed in `8.2.4`, `9.0.3` · CVSS 5.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-208 - [Django has Observable Timing Discrepancy](https://agentprime.io/advisories/GHSA-2mcm-79hx-8fxw.md) `GHSA-2mcm-79hx-8fxw`, `BIT-django-2025-13473`, `CVE-2025-13473`, `PYSEC-2026-42` · PyPI `django`: affected `>=4.2a1, <4.2.28 || >=5.2a1, <5.2.11 || >=6.0a1, <6.0.2`, fixed in `4.2.28`, `5.2.11`, `6.0.2` · CVSS 5.3 Medium · Not analysed yet · Published 3 Feb 2026 · Tags: CWE-208 - [OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication](https://agentprime.io/advisories/GHSA-xg4x-w2j3-57h6.md) `GHSA-xg4x-w2j3-57h6`, `CVE-2026-23892`, `PYSEC-2026-1716` · PyPI `octoprint`: affected `<1.11.6`, fixed in `1.11.6` · CVSS 6.0 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-208 - [Spring Security has a broken timing attack mitigation implemented in DaoAuthenticationProvide](https://agentprime.io/advisories/GHSA-vqxh-445g-37fc.md) `GHSA-vqxh-445g-37fc`, `CVE-2025-22234` · Maven `org.springframework.security:spring-security-core`: affected `>=6.3.8, <6.3.9 || >=6.4.4, <6.4.5`, fixed in `6.3.9`, `6.4.5` · CVSS 5.3 Medium · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-208 - [FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection](https://agentprime.io/advisories/GHSA-95c6-p277-p87g.md) `GHSA-95c6-p277-p87g`, `CVE-2026-23996`, `PYSEC-2026-1358` · PyPI `fastapi-api-key`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 3.7 Low · Not analysed yet · Published 21 Jan 2026 · Tags: CWE-208 - [File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login](https://agentprime.io/advisories/GHSA-43mm-m3h2-3prc.md) `GHSA-43mm-m3h2-3prc`, `CVE-2026-23849`, `GO-2026-4344` · Go `github.com/filebrowser/filebrowser` and 1 more: affected `<=1.11.0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 21 Jan 2026 · Tags: Information disclosure, CWE-208 - [Non-constant-time code generation on ARM32 targets](https://agentprime.io/advisories/GHSA-2gqc-6j2q-83qp.md) `GHSA-2gqc-6j2q-83qp`, `CVE-2026-23519`, `RUSTSEC-2026-0003` · crates.io `cmov`: affected `>=0.0.0-0, <0.4.4`, fixed in `0.4.4` · CVSS 8.9 High · Not analysed yet · Published 14 Jan 2026 · Tags: CWE-208 - [Gallagher HBUS Devices: Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with…](https://agentprime.io/advisories/CVE-2025-52457.md) `CVE-2025-52457` · CVE record: Gallagher HBUS Devices · CVSS 5.7 Medium · Not analysed yet · Published 18 Nov 2025 · Tags: CWE-208 - [Mattermost has an Observable Timing Discrepancy vulnerability in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-xr3w-rmvj-f6m7.md) `GHSA-xr3w-rmvj-f6m7`, `CVE-2025-54499`, `GO-2025-4036` · Go `github.com/mattermost/mattermost-server` and 3 more: affected `>=10.5.0+incompatible, <10.5.11+incompatible || >=10.11.0+incompatible, <10.11.3+incompatible`, fixed in `10.5.11+incompatible`, `10.11.3+incompatible` · CVSS 3.1 Low · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-208 - [Mbed TLS through 3.6.4 has an Observable Timing Discrepancy.](https://agentprime.io/advisories/CVE-2025-59438.md) `CVE-2025-59438` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2025 · Tags: CWE-208 - [Mbed TLS before 3.6.5 allows a local timing attack against certain RSA operations, and direct calls to mbedtls_mpi_mod_inv or mbedtls_mpi_gcd.](https://agentprime.io/advisories/CVE-2025-54764.md) `CVE-2025-54764` · CVE record · CVSS 6.2 Medium · Not analysed yet · Published 20 Oct 2025 · Tags: CWE-208 - [Dragonfly vulnerable to timing attacks against Proxy’s basic authentication in d7y.io/dragonfly](https://agentprime.io/advisories/GHSA-c2fc-9q9c-5486.md) `GHSA-c2fc-9q9c-5486`, `CVE-2025-59350`, `GO-2025-3972` · Go `d7y.io/dragonfly/v2` and 1 more: affected `<2.1.0`, fixed in `2.1.0` · CVSS 2.7 Low · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-208 - [Timing-Based Username Enumeration in DivvyDrive Information Technologies' DivvyDrive Web](https://agentprime.io/advisories/CVE-2025-9031.md) `CVE-2025-9031` · CVE record: DivvyDrive Information Technologies Inc. DivvyDrive Web · CVSS 4.3 Medium · Not analysed yet · Published 24 Sept 2025 · Tags: Information disclosure, CWE-208 - [Timing Attack Vulnerability in SCRAM Authentication](https://agentprime.io/advisories/GHSA-3wfh-36rx-9537.md) `GHSA-3wfh-36rx-9537`, `CVE-2025-59432` · Maven `com.ongres.scram:scram-common`: affected `<3.2`, fixed in `3.2` · CVSS 6.6 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-208, CWE-385 - [httpsig-rs: HMAC verification is vulnerable to timing attack](https://agentprime.io/advisories/GHSA-q7pg-9pr4-mrp2.md) `GHSA-q7pg-9pr4-mrp2`, `CVE-2025-59058` · crates.io `httpsig`: affected `<0.0.19`, fixed in `0.0.19` · CVSS 5.9 Medium · Not analysed yet · Published 12 Sept 2025 · Tags: CWE-208 - [Liferay Portal exposes ERC which can lead to exploit the time response attack](https://agentprime.io/advisories/GHSA-9p7x-8c57-4pqv.md) `GHSA-9p7x-8c57-4pqv`, `CVE-2025-43786` · Maven `com.liferay:com.liferay.headless.admin.workflow.impl` and 2 more: affected `>=5.0.4, <5.0.83`, fixed in `5.0.83` · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Cross-site scripting (XSS), Information disclosure, CWE-208 - [Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in Oberon PSA Crypto library](https://agentprime.io/advisories/CVE-2025-7383.md) `CVE-2025-7383` · CVE record: Oberon microsystems AG Oberon PSA Crypto · CVSS 5.9 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Weak cryptography or TLS, CWE-208 - [Timing side-channel vulnerability in AES-CBC decryption with PKCS#7 padding in ocrypto library](https://agentprime.io/advisories/CVE-2025-7071.md) `CVE-2025-7071` · CVE record: Oberon microsystems AG ocrypto · CVSS 5.9 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Weak cryptography or TLS, CWE-208 - [Liferay Portal Username Enumeration Vulnerability](https://agentprime.io/advisories/GHSA-x7p4-v8mj-6fxx.md) `GHSA-x7p4-v8mj-6fxx`, `CVE-2025-43754` · Maven `com.liferay.portal:release.portal.bom`: affected `>=7.4.0-ga1, <=7.4.3.132-ga132`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 21 Aug 2025 · Tags: CWE-208 - [Intel(R) CSME and Intel(R) SPS: Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may…](https://agentprime.io/advisories/CVE-2025-20067.md) `CVE-2025-20067` · CVE record: Intel(R) CSME and Intel(R) SPS · CVSS 6.8 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-208 - [riscv-boom SonicBOOM L1 Data Cache timing discrepancy](https://agentprime.io/advisories/CVE-2025-8774.md) `CVE-2025-8774` · CVE record: riscv-boom SonicBOOM · CVSS 2.0 Low · Not analysed yet · Published 9 Aug 2025 · Tags: Information disclosure, CWE-208 - [Quiet uses insecure, inconsistent verification on local backend token](https://agentprime.io/advisories/CVE-2025-53940.md) `CVE-2025-53940` · CVE record: TryQuiet quiet · CVSS 8.5 High · Not analysed yet · Published 24 Jul 2025 · Tags: CWE-208 - [SignXML's signature verification with HMAC is vulnerable to a timing attack](https://agentprime.io/advisories/GHSA-gmhf-gg8w-jw42.md) `GHSA-gmhf-gg8w-jw42`, `CVE-2025-48995`, `PYSEC-2026-1922` · PyPI `signxml`: affected `<4.0.4`, fixed in `4.0.4` · CVSS 6.9 Medium · Not analysed yet · Published 5 Jun 2025 · Tags: CWE-208 - [Potential Timing Side-Channel Vulnerability in vLLM’s Chunk-Based Prefix Caching](https://agentprime.io/advisories/GHSA-4qjh-9fv9-r85r.md) `GHSA-4qjh-9fv9-r85r`, `CVE-2025-46570`, `PYSEC-2025-53` · PyPI `vllm`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 2.6 Low · Not analysed yet · Published 28 May 2025 · Tags: CWE-208 - [Mattermost vulnerable to Observable Timing Discrepancy](https://agentprime.io/advisories/GHSA-2j87-p623-8cc2.md) `GHSA-2j87-p623-8cc2`, `CVE-2025-27936`, `GO-2025-3618` · Go `github.com/mattermost/mattermost-plugin-msteams` and 1 more: affected `<2.1.0`, fixed in `2.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 16 Apr 2025 · Tags: CWE-208 - [User enumeration via timing attack in Zabbix web interface](https://agentprime.io/advisories/CVE-2024-36469.md) `CVE-2024-36469` · CVE record: Zabbix Zabbix · CVSS 2.3 Low · Not analysed yet · Published 2 Apr 2025 · Tags: CWE-208 - [String::Compare::ConstantTime for Perl through 0.321 is vulnerable to timing attacks that allow an attacker to guess the length of a secret string](https://agentprime.io/advisories/CVE-2024-13939.md) `CVE-2024-13939` · CVE record: FRACTAL String::Compare::ConstantTime · CVSS 7.5 High · Not analysed yet · Published 28 Mar 2025 · Tags: CWE-208 - [An issue was discovered in OpenSlides before 4.2.5.](https://agentprime.io/advisories/CVE-2025-30344.md) `CVE-2025-30344` · CVE record: Intevation OpenSlides · CVSS 5.3 Medium · Not analysed yet · Published 21 Mar 2025 · Tags: CWE-208 - [Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations](https://agentprime.io/advisories/GHSA-q65w-fg65-79f4.md) `GHSA-q65w-fg65-79f4`, `CVE-2025-29780` · PyPI `postquantum-feldman-vss`: affected `<=0.8.0b2`, no fixed version yet · CVSS 5.8 Medium · Not analysed yet · Published 14 Mar 2025 · Tags: Information disclosure, CWE-208, CWE-385 - [IBM Common Cryptographic Architecture information disclosure](https://agentprime.io/advisories/CVE-2024-22340.md) `CVE-2024-22340` · CVE record: IBM Common Cryptographic Architecture and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Mar 2025 · Tags: CWE-208 - [Security Update for the OPC UA .NET Standard Stack](https://agentprime.io/advisories/GHSA-h958-fxgg-g7w3.md) `GHSA-h958-fxgg-g7w3`, `CVE-2024-42512` · NuGet `OPCFoundation.NetStandard.Opc.Ua.Core`: affected `<1.5.374.158`, fixed in `1.5.374.158` · CVSS 5.9 Medium · Not analysed yet · Published 3 Mar 2025 · Tags: Broken access control, CWE-208 - [An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2.](https://agentprime.io/advisories/CVE-2024-54772.md) `CVE-2024-54772` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-208 - [Duplicate Advisory: Authorization Bypass in OPC UA .NET Standard Stack](https://agentprime.io/advisories/GHSA-qv5f-57gw-vx3h.md) `GHSA-qv5f-57gw-vx3h` · NuGet `OPCFoundation.NetStandard.Opc.Ua`: affected `<1.5.374.158`, fixed in `1.5.374.158` · CVSS 8.6 High · Withdrawn · Not analysed yet · Published 10 Feb 2025 · Tags: Broken access control, CWE-208 - [Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing](https://agentprime.io/advisories/GHSA-p953-3j66-hg45.md) `GHSA-p953-3j66-hg45`, `CVE-2024-23953` · Maven `org.apache.hive:hive-llap-common`: affected `<4.0.0`, fixed in `4.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 28 Jan 2025 · Tags: Authentication bypass, CWE-208 - [Issue with AWS Sign-in IAM User Login Flow - Possible Username Enumeration](https://agentprime.io/advisories/CVE-2025-0693.md) `CVE-2025-0693` · CVE record: AWS AWS Sign-in IAM Login Flow · CVSS 6.9 Medium · Not analysed yet · Published 23 Jan 2025 · Tags: CWE-204, CWE-208 - [GNU GRUB2: GNU GRUB (aka GRUB2) through 2.12 does not use a constant-time algorithm for…](https://agentprime.io/advisories/CVE-2024-56738.md) `CVE-2024-56738` · CVE record: GNU GRUB2 · CVSS 5.3 Medium · Not analysed yet · Published 29 Dec 2024 · Tags: CWE-208 - [authentik allows a timing attack due to missing constant time comparison for metrics view](https://agentprime.io/advisories/CVE-2024-52307.md) `CVE-2024-52307` · CVE record: goauthentik authentik · CVSS 6.3 Medium · Not analysed yet · Published 21 Nov 2024 · Tags: CWE-208 - [Intel(R) QAT Engine for OpenSSL software: Observable timing discrepancy in some Intel(R) QAT Engine for OpenSSL software before…](https://agentprime.io/advisories/CVE-2024-31074.md) `CVE-2024-31074` · CVE record: Intel(R) QAT Engine for OpenSSL software · CVSS 8.2 High · Not analysed yet · Published 13 Nov 2024 · Tags: CWE-208 - [IBM TXSeries for Multiplatforms information disclosure](https://agentprime.io/advisories/CVE-2024-41741.md) `CVE-2024-41741` · CVE record: IBM TXSeries for Multiplatforms · CVSS 5.3 Medium · Not analysed yet · Published 1 Nov 2024 · Tags: CWE-208 - [Timing Attack in mudler/localai](https://agentprime.io/advisories/CVE-2024-7010.md) `CVE-2024-7010` · CVE record: mudler mudler/localai · CVSS 7.5 High · Not analysed yet · Published 29 Oct 2024 · Tags: CWE-208 - [Gradio performs a non-constant-time comparison when comparing hashes](https://agentprime.io/advisories/GHSA-j757-pf57-f8r4.md) `GHSA-j757-pf57-f8r4`, `CVE-2024-47869`, `PYSEC-2024-199` · PyPI `gradio`: affected `<4.44.0`, fixed in `4.44.0` · CVSS 2.3 Low · Not analysed yet · Published 10 Oct 2024 · Tags: Information disclosure, CWE-208 - [basic-auth-connect's callback uses time unsafe string comparison](https://agentprime.io/advisories/GHSA-7p89-p6hx-q4fw.md) `GHSA-7p89-p6hx-q4fw`, `CVE-2024-47178` · npm `basic-auth-connect`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2024 · Tags: CWE-208 - [Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication](https://agentprime.io/advisories/GHSA-2h46-8gf5-fmxv.md) `GHSA-2h46-8gf5-fmxv`, `CVE-2024-45052`, `PYSEC-2026-1331` · PyPI `ethyca-fides`: affected `<2.44.0`, fixed in `2.44.0` · CVSS 5.3 Medium · Not analysed yet · Published 4 Sept 2024 · Tags: CWE-208 - [AES T-Table sub-cache-line leakage](https://agentprime.io/advisories/CVE-2024-1543.md) `CVE-2024-1543` · CVE record: wolfSSL wolfSSL · CVSS 4.1 Medium · Not analysed yet · Published 29 Aug 2024 · Tags: CWE-208 - [An issue was discovered in Matrix libolm through 3.2.16.](https://agentprime.io/advisories/CVE-2024-45191.md) `CVE-2024-45191` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 22 Aug 2024 · Tags: CWE-208 - [Answer has Observable Timing Discrepancy in github.com/answerdev/answer](https://agentprime.io/advisories/GHSA-rvjp-8qj4-8p29.md) `GHSA-rvjp-8qj4-8p29`, `CVE-2023-1538`, `GO-2023-1661` · Go `github.com/answerdev/answer`: affected `<1.0.6`, fixed in `1.0.6` · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2024 · Tags: CWE-208 - [easy-scrypt Observable Timing Discrepancy vulnerability in github.com/agnivade/easy-scrypt](https://agentprime.io/advisories/GHSA-r894-5r7v-7rx3.md) `GHSA-r894-5r7v-7rx3`, `CVE-2014-125055`, `GO-2023-1294` · Go `github.com/agnivade/easy-scrypt`: affected `<1.0.0`, fixed in `1.0.0` · CVSS 2.6 Low · Not analysed yet · Published 20 Aug 2024 · Tags: CWE-208 - [open-telemetry has an Observable Timing Discrepancy](https://agentprime.io/advisories/GHSA-rfxf-mf63-cpqv.md) `GHSA-rfxf-mf63-cpqv`, `CVE-2024-42368`, `GO-2024-3066` · Go `github.com/open-telemetry/opentelemetry-collector-contrib/extension/bearertokenauthextension`: affected `>=0.80.0, <0.107.0`, fixed in `0.107.0` · CVSS 6.5 Medium · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-208 - [Windows Kerberos Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-29995.md) `CVE-2024-29995` · CVE record: Microsoft Windows 10 Version 1809 and 4 more · CVSS 8.1 High · Not analysed yet · Published 13 Aug 2024 · Tags: CWE-208 - [In JetBrains TeamCity before 2024.07 comparison of authorization tokens took non-constant time](https://agentprime.io/advisories/CVE-2024-41828.md) `CVE-2024-41828` · CVE record: JetBrains TeamCity · CVSS 2.6 Low · Not analysed yet · Published 22 Jul 2024 · Tags: CWE-208 - [Usage of non-constant time base64 decoder could lead to leakage of secret key material](https://agentprime.io/advisories/GHSA-j8cm-g7r6-hfpq.md) `GHSA-j8cm-g7r6-hfpq`, `CVE-2024-40640`, `RUSTSEC-2024-0354` · crates.io `vodozemac`: affected `>=0.0.0-0, <0.7.0`, fixed in `0.7.0` · CVSS 2.9 Low · Not analysed yet · Published 17 Jul 2024 · Tags: CWE-208 - [Django vulnerable to user enumeration attack](https://agentprime.io/advisories/GHSA-x7q2-wr7g-xqmf.md) `GHSA-x7q2-wr7g-xqmf`, `BIT-django-2024-39329`, `CVE-2024-39329`, `PYSEC-2024-57` · PyPI `django`: affected `>=4.2, <4.2.14 || >=5.0, <5.0.7`, fixed in `4.2.14`, `5.0.7` · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2024 · Tags: CWE-208 - [Control-flow timing leak in Kyber reference implementation when compiled with Clang 15-18 for -Os, -O1 and other options](https://agentprime.io/advisories/CVE-2024-36405.md) `CVE-2024-36405` · CVE record: open-quantum-safe liboqs · CVSS 5.9 Medium · Not analysed yet · Published 10 Jun 2024 · Tags: CWE-208, CWE-385 - [Dell BSAFE Crypto-C Micro Edition: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5…](https://agentprime.io/advisories/CVE-2020-35165.md) `CVE-2020-35165` · CVE record: Dell Dell BSAFE Crypto-C Micro Edition and 1 more · CVSS 5.1 Medium · Not analysed yet · Published 22 May 2024 · Tags: CWE-208 - [Perl-crypt-openssl-rsa: side-channel attack in pkcs#1 v1.5 padding mode (marvin attack)](https://agentprime.io/advisories/CVE-2024-2467.md) `CVE-2024-2467` · CVE record: Red Hat Red Hat Enterprise Linux 6 and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 25 Apr 2024 · Tags: CWE-208 - [Rust-openssl: timing based side-channel can lead to a bleichenbacher style attack](https://agentprime.io/advisories/CVE-2024-3296.md) `CVE-2024-3296` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 4 Apr 2024 · Tags: CWE-208 - [vantage6 vulnerable to a username timing attack on recover password/MFA token](https://agentprime.io/advisories/GHSA-5h3x-6gwf-73jm.md) `GHSA-5h3x-6gwf-73jm`, `CVE-2024-24770`, `PYSEC-2026-2005` · PyPI `vantage6`: affected `<4.3.0`, fixed in `4.3.0` · CVSS 5.3 Medium · Not analysed yet · Published 15 Mar 2024 · Tags: Race condition, CWE-208 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .