Robuta

https://advisories.gitlab.com/pypi/adyen/GHSA-f3q4-ggfp-jv34/ Adyen APIs Library for Python timing attack vulnerability | GitLab Advisory Database (GLAD) GHSA-f3q4-ggfp-jv34 Adyen APIs Library for Python timing attack vulnerability: Adyen has utility methods for validating notification HMAC signatures. The... for pythontiming attack https://advisories.gitlab.com/pypi/m2crypto/CVE-2023-50781/ m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657 | GitLab Advisory... CVE-2023-50781 m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657: A flaw was found in m2crypto. This issue may allow a remote attacker... timing attack https://advisories.gitlab.com/composer/ezsystems/ezpublish-kernel/GMS-2022-1738/ Login timing attack in ezsystems/ezpublish-kernel | GitLab Advisory Database (GLAD) GMS-2022-1738 Login timing attack in ezsystems/ezpublish-kernel: Ibexa DXP is using random execution time to hinder timing attacks against user accounts, a... timing attack https://code.djangoproject.com/ticket/20760 #20760 (Account enumeration through timing attack in password verification in django.contrib.auth)... timing attack https://advisories.gitlab.com/golang/github.com/traefik/traefik/v2/CVE-2026-32595/ Traefik Affected by BasicAuth Middleware Timing Attack Allows Username Enumeration | GitLab... CVE-2026-32595 Traefik Affected by BasicAuth Middleware Timing Attack Allows Username Enumeration: There is a potential vulnerability in Traefik's BasicAuth... timing attacktraefikaffectedbasicauthmiddleware https://thehackernews.com/2022/10/new-timing-attack-against-npm-registry.html New Timing Attack Against NPM Registry API Could Expose Private Packages A new timing attack against the npm registry API could expose private packages used by organizations, putting developers at risk of attacks. timing attacknpm registrynew https://advisories.gitlab.com/composer/illuminate/auth/CVE-2017-14775/ Close remember_me Timing Attack Vector | GitLab Advisory Database (GLAD) CVE-2017-14775 Close remember_me Timing Attack Vector: This package mishandles the remember_me token verification process because DatabaseUserProvider does not... remember metiming attackclosevectorgitlab https://advisories.gitlab.com/composer/ezsystems/ezplatform-kernel/CVE-2022-48366/ Timing attack in eZ Platform Ibexa | GitLab Advisory Database (GLAD) CVE-2022-48366 Timing attack in eZ Platform Ibexa: Ibexa DXP is using random execution time to hinder timing attacks against user accounts, a method of... timing attackez platformibexagitlabadvisory https://advisories.gitlab.com/golang/github.com/traefik/traefik/v3/CVE-2026-32595/ Traefik Affected by BasicAuth Middleware Timing Attack Allows Username Enumeration | GitLab... CVE-2026-32595 Traefik Affected by BasicAuth Middleware Timing Attack Allows Username Enumeration: There is a potential vulnerability in Traefik's BasicAuth... timing attacktraefikaffectedbasicauthmiddleware https://advisories.gitlab.com/composer/silverstripe/framework/GHSA-256q-hx8w-xcqx/ Silverstripe Framework user enumeration via timing attack on login and password reset forms |... GHSA-256q-hx8w-xcqx Silverstripe Framework user enumeration via timing attack on login and password reset forms: User enumeration is possible by performing a... login and password reset https://advisories.gitlab.com/composer/silverstripe/framework/GHSA-7m2v-x7rg-5hm5/ silverstripe/framework vulnerable to user enumeration via timing attack on login and password reset... GHSA-7m2v-x7rg-5hm5 silverstripe/framework vulnerable to user enumeration via timing attack on login and password reset forms: User enumeration is possible by... https://www.ndtv.com/india-news/key-security-meet-at-pms-residence-rajnath-singh-nsa-doval-present-8286819 PM Narendra Modi's Free Hand To Forces To Decide Timing, Target To Respond To J&K Attack: Sources Prime Minister Narendra Modi is chairing a high-level meet at his Delhi residence - to review the ongoing fallout of last week's Pahalgam terror attack and the... https://advisories.gitlab.com/pypi/signxml/CVE-2025-48995/ SignXML's signature verification with HMAC is vulnerable to a timing attack | GitLab Advisory... CVE-2025-48995 SignXML's signature verification with HMAC is vulnerable to a timing attack: When verifying signatures with X509 certificate validation turned... https://advisories.gitlab.com/golang/github.com/bnb-chain/tss-lib/CVE-2023-26557/ IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic | GitLab... CVE-2023-26557 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic: io.finnet tss-lib before 2.0.0 can leak the lambda value... https://advisories.gitlab.com/golang/github.com/binance-chain/tss-lib/CVE-2023-26557/ IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic | GitLab... CVE-2023-26557 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic: io.finnet tss-lib before 2.0.0 can leak the lambda value... https://repository.lib.ncsu.edu/items/ade24c23-94fe-4b0a-9a24-4582b85106ed Adaptive timing-based active watermarking for attack attribution through stepping stones adaptivetimingbasedactivewatermarking https://advisories.gitlab.com/cargo/rsa/GHSA-4grx-2x9w-596c/ Marvin Attack: potential key recovery through timing sidechannels | GitLab Advisory Database (GLAD) GHSA-4grx-2x9w-596c Marvin Attack: potential key recovery through timing sidechannels: The Marvin Attack is a timing sidechannel vulnerability which allows... key recovery https://advisories.gitlab.com/golang/github.com/filebrowser/filebrowser/v2/CVE-2026-23849/ File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login | GitLab Advisory... CVE-2026-23849 File Browser Vulnerable to Username Enumeration via Timing Attack in /api/login: The JSONAuth.Auth function contains a logic flaw that allows... https://thehackernews.com/2014/09/unmasking-google-users-with-new-timing.html?version=meter+at+null Unmasking Google Users With a New Timing Attack Unmasking Google Users With a New Timing Attack with aunmaskinggoogleusersnew https://advisories.gitlab.com/npm/directus/CVE-2026-26185/ Directus Vulnerable to User Enumeration via Password Reset Timing Attack | GitLab Advisory Database... CVE-2026-26185 Directus Vulnerable to User Enumeration via Password Reset Timing Attack: A timing-based user enumeration vulnerability exists in the password... https://advisories.gitlab.com/maven/org.bouncycastle/bcprov-jdk15on/CVE-2024-30171/ Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack") | GitLab... CVE-2024-30171 Bouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack"): An issue was discovered in Bouncy Castle Java TLS API...