https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T15:36:41.541587+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-21671 CVE-2024-21671 — vantage6 username timing attack 2026-10-05T15:36:41.543348+00:00

Affected: vantage6

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks. Version 4.2.0 patches this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-45gq-q4xh-cp53 GHSA-45gq-q4xh-cp53 — vantage6 vulnerable to username timing attack 2026-10-05T15:36:41.543399+00:00

Affected: PyPI: vantage6-server

### Impact It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks

### Workarounds No