Security Advisory

CVE-2016-7036

9.8
CRITICAL

Vulnerability Description

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.
Published Date January 23, 2017
Official Source NIST NVD Advisory