Lucene search
+L

35 matches found

OSV
OSV
added 2026/07/07 4:3 p.m.7 views

PYSEC-2026-1716 OctoPrint has Timing Side-Channel Vulnerability in API Key Authentication

Impact OctoPrint versions up to and including 1.11.5 are affected by a theoretical timing attack vulnerability that allows API key extraction over the network. Due to using character based comparison that short-circuits on the first mismatched character during API key validation, rather than a...

6CVSS5.8AI score0.00475EPSS
SaveExploits0References7
Rows per page
Query Builder