← Database

CVE-2026-41588

CRITICAL CVSS: 9.0 Published: 2026-05-08 Modified: 2026-06-17

Description

RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16.

Affected Platforms

Inducer Relate

Weakness Type

CWE-208, CWE-203

References