django-basic-auth-ip-whitelist (>=0.2.1, <=0.3.1), django-chats (0.2.2) +14 more potentially affected by CVE-2026-15830 via django (3.0.0)

django PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-basic-auth-ip-whitelist =0.2.1, =0.8.0, =0.7.0, =0.10.0, =0.5.0, =0.6.1, =0.7.0, =0.4.1, =1.0.1, =1.0.2 and more Source cves: CVE-2026-15830...

CVE-2020-4071

CVE-2020-4071 applies to the django-basic-auth-ip-whitelist package prior to version 0.3.4. The issue is a timing-attack vulnerability caused by a character-by-character string comparison of configured BASIC_AUTH_LOGIN/BASIC_AUTH_PASSWORD against user input, which may allow an attacker within a l...

CVE-2020-4071

In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASICAUTHLOGIN and BASICAUTHPASSWORD is set. Currently the string comparison between configured credentials and the ones provided by users is...

CVE-2020-4071 Timing attack on django-basic-auth-ip-whitelist

In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASICAUTHLOGIN and BASICAUTHPASSWORD is set. Currently the string comparison between configured credentials and the ones provided by users is...

CVE-2020-4071: Observable Timing Discrepancy

In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e. BASICAUTHLOGIN and BASICAUTHPASSWORD is set. Currently the string comparison between configured credentials and the ones provided by users is...

PT-2020-17861

Name of the Vulnerable Software and Affected Versions django-basic-auth-ip-whitelist versions prior to 0.3.4 Description A potential timing attack exists on websites where basic authentication is used or configured, i.e., BASIC AUTH LOGIN and BASIC AUTH PASSWORD are set. The string comparison...