CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack. | 5.9 |
Moyen |