CVE-2026-102274

The Python library PyJWT (versions 2.9.0 through 2.14.0) is vulnerable to a flaw in PyJWKSet where it fails to handle a ValueError raised by RSAAlgorithm.from_jwk in jwt/api_jwk.py. If a JWK Set contains a single malformed RSA key alongside valid keys, the entire construction of the PyJWKSet is a...