https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:37:32.881780+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-07864 cnvd-2024-07864 2026-10-05T15:37:32.885750+00:00 cnvd-2024-07864 https://cve.radiocsirt.org/vuln/euvd-2026-196268 EUVD-2026-196268 2026-10-05T15:37:32.885784+00:00 EUVD-2026-196268 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21671 fkie_cve-2024-21671 2026-10-05T15:37:32.885798+00:00

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks. Version 4.2.0 patches this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-45gq-q4xh-cp53 GHSA-45gq-q4xh-cp53 — vantage6 vulnerable to username timing attack 2026-10-05T15:37:32.885826+00:00

Affected: PyPI: vantage6-server

### Impact It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks

### Workarounds No

 https://cve.radiocsirt.org/vuln/gsd-2024-21671 gsd-2024-21671 2026-10-05T15:37:32.885849+00:00 gsd-2024-21671 https://cve.radiocsirt.org/vuln/pysec-2024-31 PYSEC-2024-31 2026-10-05T15:37:32.885861+00:00

Affected: PyPI: vantage6

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks. Version 4.2.0 patches this vulnerability.