Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-45gq-q4xh-cp53: vantage6 vulnerable to username timing attack

Impact

It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks

Workarounds

No

ghsa
#git

vantage6 vulnerable to username timing attack

Low severity GitHub Reviewed Published Jan 30, 2024 in vantage6/vantage6 • Updated Jan 30, 2024

ghsa: Latest News

GHSA-95m2-chm4-mq7m: PHP-Textile has persistent XSS vulnerability in image link handling