CVE-2026-41588
RELATE is a web-based courseware package.
Published May 8, 2026 · updated Jun 17, 2026 · inducer relate
RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
May 8, 2026 · NIST NVD
Detected
RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16.
Jun 17, 2026 · NIST NVD
Updated
RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16.
Affected
- cpe inducer/relateversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-41588
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-41588
RELATE is a web-based courseware package. Prior to commit 2f68e16, there is a timing attack vulnerability in course/auth.py — check_sign_in_key(). This issue has been patched via commit 2f68e16.
nvd.nist.gov