Skip to content

[GHSA-6f65-4fv2-wwch] Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy#6805

Open
Ali963ali wants to merge 3 commits intoAli963ali/advisory-improvement-6805from
Ali963ali-GHSA-6f65-4fv2-wwch
Open

[GHSA-6f65-4fv2-wwch] Vendure vulnerable to timing attack that enables user enumeration in NativeAuthenticationStrategy#6805
Ali963ali wants to merge 3 commits intoAli963ali/advisory-improvement-6805from
Ali963ali-GHSA-6f65-4fv2-wwch

Commits

Commits on Feb 7, 2026