High CVSS: 7.5 CVE-2013-10031 Plack-Middleware-Session versions before 0.17 may be vulnerable to HMAC comparison timing attacks