alastria-auth (>=0.0.3, <=0.0.17), alastria-identity (>=0.2.0, <=0.4.0) +60 more potentially affected by CVE-2026-39373 via jwcrypto (>=0.4.0, <=1.5.6)

jwcrypto PYPI version =0.4.0, =0.0.3, =0.2.0, =1.0.0, =1.0.0rc2, =0.1.0, =0.1.0, =0.1.0, =0.11.0rc1, =0.4.0a0, =2.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0.2, =0.1.0.8 and more Source cves: CVE-2026-39373 Source advisory: MEND:CVE-2026-39373...

alastria-auth (>=0.0.3, <=0.0.17), alastria-identity (>=0.2.0, <=0.4.0) +9 more potentially affected by CVE-2024-28102 via jwcrypto (0.8.0)

jwcrypto PYPI version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on jwcrypto and may be impacted: - alastria-auth =0.0.3, =0.2.0, =0.4.0a0, =0.1.0.2, =3.18.0, =0.1.0, =0.0.1, =1.0.6, =1.0.0, =2.7.1, =3.1.3 Source cves: CVE-2024-28102 Source...