86 matches found
CVE-2016-7036
python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...
9.8CVSS9.7AI score
SaveExploits0References3
CVE-2016-7036
python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...
9.8CVSS9.7AI score0.02112EPSS
SaveExploits0References3
Code injection
python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...
7.5CVSS7.3AI score0.02112EPSS
SaveExploits0References3Affected Software1
PYSEC-2017-28
python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...
9.8CVSS7.1AI score0.02112EPSS
SaveExploits0References4Affected Software1
20