WRITEUP

This patch addresses a timing attack vulnerability (CVE-2024-45052) in the Ethyca Fides login endpoint by introducing artificial delays and parallel operations for invalid users to reduce timing differences. The fix includes creating a temporary user in memory and postponing exceptions to mitigate side-channel attacks.