Lucene search
+L

111 matches found

Github Security Blog
Github Security Blog
•added 2022/05/17 3:02 a.m.•43 views

python-jose failure to use a constant time comparison for HMAC keys

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.8CVSS7.2AI score0.02112EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2022/05/17 3:02 a.m.•48 views

GHSA-W799-PRG3-CX77 python-jose failure to use a constant time comparison for HMAC keys

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.8CVSS9.6AI score0.02112EPSS
SaveExploits0References7
CNVD
CNVD
•added 2017/02/08 12:00 a.m.•13 views

Unspecified vulnerability in python-jose

python-jose is an implementation of object signing and encryption. A security vulnerability exists in python-jose 1.3.1 and earlier versions; detailed vulnerability information is not currently available...

9.8CVSS9AI score0.02112EPSS
SaveExploits0References1
Veracode
Veracode
•added 2017/01/24 2:22 a.m.•26 views

Timing Attack Via Authentication

python-jose is vulnerable to timing attacks. The vulnerability is possible because it has a flaw in verification function which allows a constant time comparison for HMAC keys...

9.8CVSS9.1AI score0.02112EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2017/01/23 9:59 p.m.•29 views

CVE-2016-7036

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.8CVSS9.7AI score
SaveExploits0References3
NVD
NVD
•added 2017/01/23 9:59 p.m.•44 views

CVE-2016-7036

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.8CVSS9.7AI score0.02112EPSS
SaveExploits0References3
Prion
Prion
•added 2017/01/23 9:59 p.m.•23 views

Code injection

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

7.5CVSS7.3AI score0.02112EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2017/01/23 9:59 p.m.•15 views

PYSEC-2017-28

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.8CVSS7.1AI score0.02112EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
•added 2017/01/23 9:00 p.m.•40 views

CVE-2016-7036

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.8CVSS9.8AI score0.02112EPSS
SaveExploits0
Cvelist
Cvelist
•added 2017/01/23 9:00 p.m.•34 views

CVE-2016-7036

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.7AI score0.02112EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/23 12:00 a.m.•3 views

CVE-2016-7036: Undefined Security Weakness

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys...

9.8CVSS5.8AI score0.02112EPSS
SaveExploits0References2
Rows per page
Query Builder