In django-basic-auth-ip-whitelist before 0.3.4, a potential timing attack exists on websites where the basic authentication is used or configured, i.e.
CVSS 3.1LOW 2.4·Physical·No auth·No interaction·EPSS 0.00358·Published 2020-06-24·Fixed in 0.3.4CWE-208