Dropbear 2011.54 through 2018.76 has an inconsistent failure delay that may lead to revealing valid usernames, a different issue than CVE-2018-15599.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-12953.json"
[ { "events": [ { "introduced": "2011.54" }, { "last_affected": "2018.76" } ] } ]