1171 matches found
EulerOS 2.0 SP11 : python-jwt (EulerOS-SA-2026-3145)
According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...
python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens
A flaw was found in PyJWT, a Python library for JSON Web Token JWT implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys JWK in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the...
ROOT-APP-PYPI-CVE-2026-48522 CVE-2026-48522 in PyJWT - Patched by Root
Root has patched CVE-2026-48522 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48524 CVE-2026-48524 in PyJWT - Patched by Root
Root has patched CVE-2026-48524 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-32597 CVE-2026-32597 in PyJWT - Patched by Root
Root has patched CVE-2026-32597 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48526 CVE-2026-48526 in pyjwt - Patched by Root
Root has patched CVE-2026-48526 in the pyjwt package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48523 CVE-2026-48523 in PyJWT - Patched by Root
Root has patched CVE-2026-48523 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48525 CVE-2026-48525 in PyJWT - Patched by Root
Root has patched CVE-2026-48525 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
CLSA-2026-1783299703 TuxCare security update for pyjwt (4 CVEs)
TuxCare rebuilt pyjwt to address 4 CVEs. Fixed in 2.10.1.post2+tuxcare...
CLSA-2026-1775608265 TuxCare security update for pyjwt (1 CVE)
TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 1.7.1.post2+tuxcare...
CLSA-2025-1765930336 TuxCare security update for pyjwt (1 CVE)
TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 1.7.1.post1+tuxcare...
CLSA-2025-1756858338 TuxCare security update for pyjwt (1 CVE)
TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 2.3.0.post1+tuxcare...
CLSA-2025-1757376737 TuxCare security update for pyjwt (1 CVE)
TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 2.10.1.post1+tuxcare...
CLSA-2025-1756858339 TuxCare security update for pyjwt (1 CVE)
TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 2.8.0.post1+tuxcare...
Security Bulletin:PyJWT CVE-2023-40254: Local File Inclusion & Server-Side Request Forgery via PyJWKClient uri Argument
Summary PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient passes its uri argument directly to urllib.request.urlopen which uses Python stdlib's default OpenerDirector registering HTTPHandler, HTTPSHandler, FTPHandler, FileHandler, and DataHandler. There is currently...
PT-2026-73654
TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 1.7.1.post1+tuxcare...
PT-2026-75300
TuxCare rebuilt pyjwt to address 4 CVEs. Fixed in 2.10.1.post2+tuxcare...
PT-2026-73531
TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 2.3.0.post1+tuxcare...