Skip to content
OpenAdvisories

Package · PyPI

python-jose

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2016-7036

    python-jose failure to use a constant time comparison for HMAC keys

    python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.

    python-jose PyPI