CVE-2022-48566

score

<0.1

cvss

5.9

epss

1.3%

published

2023-08-22

kev added

—

first seen

2026-10-21

Python 3.9.1 and earlier contain a timing attack vulnerability in compare_digest in Lib/hmac.py caused by optimizations in the accumulator variable, letting attackers potentially perform timing attacks, exploit requires attacker to control input data.