tag
Timing-Attack
Medium
Vendure GraphQL Admin API Authentication Timing Attack / User Enumeration (CVE-2026-25050)
CVE-2026-25050·
Vendure (NativeAuthenticationStrategy.authenticate(), Admin GraphQL API)
unpatched
Medium
Apache HTTP Server mod_auth_digest Timing Attack — CVE-2026-33006
CVE-2026-33006·
Apache HTTP Server (mod_auth_digest module)
patched