CVE-2016-7036: python-jose failure to use a constant time comparison for HMAC keys

Severity: Critical

CVSS Score: 9.8

python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.