EUVD-2026-88547

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1591 more potentially affected by CVE-2026-102275 via pyjwt (>=2.1.0, <=2.14.0)

pyjwt PYPI version =2.1.0, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.5.2, =1.5.6 and more Source cves: CVE-2026-102275 Source advisory: GHSA-X33G-CR3X-6449...

10xscale-agentflow-cli (0.1.5), 360solutions-bc-mcp (>=0.5.3, <=0.5.7) +1591 more potentially affected by CVE-2026-102275 via pyjwt (>=2.1.0, <=2.14.0)

pyjwt PYPI version =2.1.0, =0.5.3, =2.3.0, =0.1.0, =1.0.0, =1.8.26, =1.1.0rc1, =1.0.1, =0.1.0.post1, =0.1.5, =2.3.10rc8, =0.0.9rc17, =1.2.0, =1.5.2, =1.5.6 and more Source cves: CVE-2026-102275 Source advisory: OSV:GHSA-X33G-CR3X-6449...

GHSA-X33G-CR3X-6449 PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

Summary PyJWT accepts internally inconsistent OKP private JWKs where the declared public key x does not correspond to the supplied private key d. When d is present, OKPAlgorithm.fromjwk constructs the Ed25519/Ed448 private key from d without verifying that the public key derived from d matches x...

PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion

Summary PyJWT accepts internally inconsistent OKP private JWKs where the declared public key x does not correspond to the supplied private key d. When d is present, OKPAlgorithm.fromjwk constructs the Ed25519/Ed448 private key from d without verifying that the public key derived from d matches x...

OPENSUSE-SU-2026:11994-1 python313-PyJWT-2.15.1-1.1 on GA media

These are all security issues fixed in the python313-PyJWT-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-105703

These are all security issues fixed in the python313-PyJWT-2.15.1-1.1 package on the GA media of openSUSE Tumbleweed...

Exploit for CVE-2026-102268

CVE-2026-102268 — PyJWT Asymmetric-PEM Detection Bypass E...

PyJWT decode bypass

The vulnerability of the PyJWT.decode function in the PyJWT library is related to modifications to the assumed data. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...

PyJWT OKPAlgorithm from_jwk Buffer Overflow

The vulnerability of the PyJWT OKPAlgorithm.fromjwk function in the jwt/algorithms.py library is related to the use of an unreliable source. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PyJWT _load() DoS

The vulnerability of the PyJWS.load function in the jwt/apijws.py file of the PyJWT library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PyJWT HMAC Algorithm Unauthorized Access

The vulnerability of the HMACAlgorithm.fromjwk method in PyJWT is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

PyJWT RSAAlgorithm.from_jwk() DoS

The vulnerability of the RSAAlgorithm.fromjwk function in the jwt/apijwk.py scenario of the PyJWT library is related to insufficient handling of exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PyJWT HMAC Algorithm Bypass

The vulnerability of the HMACAlgorithm.preparekey function in the jwt/algorithms.py library of PyJWT is related to errors in cryptographic signature verification. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms remotely...

PyJWT HMAC Algorithm Use-After-Free

The vulnerability of the HMACAlgorithm.preparekey function in the PyJWT library is related to errors in the verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms and gain unauthorized access to protected informati...

PyJWT jwt/utils.py Function Disclosure

The vulnerability of the ispemformat function in the jwt/utils.py library of PyJWT is related to errors in the verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to bypass existing security mechanisms and disclose sensitive information...

PyJWT get_signing_key_from_jwt DoS

The vulnerability of the getsigningkeyfromjwt function in the PyJWT library is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

SummaryPyJWT.decode/decodecomplete mutates a caller-supplied options dict in place whenever verifysignature is falsy, adding verifyexp/verifynbf/verifyiat/verifyaud/verifyiss/verifysub/verifyjti keys directly onto that object. If application code reuses the same options dict across calls a config...

PYSEC-2026-4146 PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse

Summary PyJWT.decode/decodecomplete mutates a caller-supplied options dict in place whenever verifysignature is falsy, adding verifyexp/verifynbf/verifyiat/verifyaud/verifyiss/verifysub/verifyjti keys directly onto that object. If application code reuses the same options dict across calls a confi...

PYSEC-2026-4141 PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)

Summary PyJWKClient.getsigningkeyfromjwttoken — the first step of the JWKS verification flow documented in docs/usage.rst — must decode a token's payload before its signature can be checked, via jwt.apijwt.decodecompletetoken, options="verifysignature": False. That call parses the payload with...