CWE-208 Observable Timing Discrepancy

Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle

lightrag-hku: Plaintext Passwords Compared Without Constant-Time Function

Tinyauth: User enumeration attack by timing oracle

OpenBao's Recovery Mode Vulnerable To Token Leakage via Timing Attack

Sync-in Server has Username/Login Enumeration via Timing Side-Channel on POST /api/auth/login (incomplete fix of the prior timing-attack advisory)

Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

Duplicate Advisory: Grav: Non constant time nonce comparison in Utils::verifyNonce() used for CSRF protection

PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (timing side-channel)

Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Open WebUI: Account enumeration via observable login timing discrepancy

NocoDB: User Enumeration via Sign-In Timing

FileBrowser Quantum has Username Enumeration via Authentication Timing Side-Channel

pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier

Filament: Timing-based user enumeration on login page

Shopware: Timing-attack on admin panel allowing enumeration of administrator usernames

Potential Observable Timing Discrepancy in Wagtail

Django has Observable Timing Discrepancy

Apache Tomcat - AJP secret compared in non-constant time

pyquorum: Timing side‑channel in mul_mod

opentelemetry-collector-contrib's azureauthextension Authenticate method does not validate bearer tokens, allowing auth bypass via replay