The host is installed with Python before 3.6.13, 3.7.x before 3.7.10, 3.8.x before 3.8.7, or 3.9.x before 3.9.1 and is prone to a timing attack vulnerability. A flaw is present in the application, which fails to properly handle an issue in compare_digest in Lib/hmac.py. Successful exploitation allows attackers to lead to constant-time-defeating optimisations in the accumulator variable in hmac.compare_digest.