CWE-385 Covert Timing Channel

phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery

PHP JWT Library: RSA1_5 (RSAES-PKCS1-v1_5) decryption lacks implicit rejection, exposing a Bleichenbacher/Marvin padding oracle

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

vLLM is vulnerable to timing attack at bearer auth

Bouncy Castle Has Covert Timing Channel Vulnerability

Marvin Attack: potential key recovery through timing sidechannels

OpenClaw has a gateway exec allowlist allow-always bypass via unregistered /usr/bin/script wrapper

Marvin Attack: potential key recovery through timing sidechannels

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657

Timing Attack Vulnerability in SCRAM Authentication

Minerva timing attack on P-256 in python-ecdsa

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations

Devolutions.XTS.NET Vulnerable to Timing Attack on GF Multiplications

RSA decryption vulnerable to Bleichenbacher timing vulnerability

Timing attacks in python-rsa

Observable Timing Discrepancy in pypqc

Covert Timing Channel in Apache CXF