{"action":"Upgrade django-basic-auth-ip-whitelist to 0.3.4 or later.","affected":[{"fixed":"0.3.4","introduced":"0"}],"component":"django-basic-auth-ip-whitelist","cve_ids":["CVE-2020-4071"],"ecosystem":"PyPI","epss":0.00358,"exploited":false,"fixed_versions":["0.3.4"],"ghsa_id":"GHSA-m38j-pmg3-v5x5","id":"tcs_01M5KFQ22Q2162K9J37G8AGC91","modified_at":"2026-07-08T06:30:01.902415560Z","published_at":"2020-06-23T19:58:27Z","references":["https://osv.dev/vulnerability/GHSA-m38j-pmg3-v5x5","https://github.com/tm-kn/django-basic-auth-ip-whitelist/security/advisories/GHSA-m38j-pmg3-v5x5","https://nvd.nist.gov/vuln/detail/CVE-2020-4071","https://github.com/tm-kn/django-basic-auth-ip-whitelist/commit/effe05ed1ed9e1ccc675a65b69d36217e5c5dfc6","https://github.com/pypa/advisory-database/tree/main/vulns/django-basic-auth-ip-whitelist/PYSEC-2020-37.yaml","https://github.com/tm-kn/django-basic-auth-ip-whitelist","https://groups.google.com/forum/#!msg/django-developers/iAaq0pvHXuA/fpUuwjK3i2wJ"],"severity":{"label":"low","score":2.2},"sources":[{"source":"osv","source_id":"GHSA-m38j-pmg3-v5x5","url":"https://osv.dev/vulnerability/GHSA-m38j-pmg3-v5x5"}],"summary":"Timing attack on django-basic-auth-ip-whitelist"}