CWE-208.

Timing side channel vulnerability in UIDL request handler in Vaadin 10, 11-14, and 15-18

• CWE-208

>=10.0.0, <10.0.17 || >=11.0.0, <14.4.7 || >=15.0.0, <18.0.6 · fixed in 10.0.17, 14.4.7, 18.0.6

Timing side channel vulnerability in endpoint request handler in Vaadin 15-19

• CWE-208

>=19.0.0, <19.0.1 || >=15.0.0, <18.0.7 · fixed in 19.0.1, 18.0.7

Activerecord-session_store Vulnerable to Timing Attack

• CWE-208

<2.0.0 · fixed in 2.0.0

Possible timing attack in derivation_endpoint

• Information disclosure
• CWE-208

<3.3.0 · fixed in 3.3.0

Timing attack on django-basic-auth-ip-whitelist

• CWE-208

<0.3.4 · fixed in 0.3.4

Potential Observable Timing Discrepancy in Wagtail

• Race condition
• CWE-208

<2.7.3 || >=2.8rc1, <2.8.2 || >=2.9rc1, <2.9 · fixed in 2.7.3, 2.8.2, 2.9

Possible Information Leak / Session Hijack Vulnerability in Rack

• Information disclosure
• CWE-208

<1.6.12 || >=2.0.0, <2.0.8 · fixed in 1.6.12, 2.0.8

floragunn Search Guard: Search Guard versions before 21.0 had an timing side channel issue when using the…

• floragunn Search Guard
• CWE-208

express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison

• CWE-208

<1.1.7 · fixed in 1.1.7

The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks

• Wi-Fi Alliance hostapd with SAE support
• Wi-Fi Alliance wpa_supplicant with SAE support
• CWE-208
• CWE-524

Timing Attack in csrf-lite

• CWE-208

<0.1.2 · fixed in 0.1.2