EUVD-2026-88541

PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, PyJWT HMACAlgorithm.preparekey is affected because HMAC key guard only recognizes top-level public JWK forms and misses container representations. This occurs when an application allows HMAC and asymmetric...

CVE-2026-102273

The PyJWT Python library (versions 2.13.0 through 2.14.0 ) contains a vulnerability in HMACAlgorithm.prepare_key . The flaw occurs because the HMAC key guard fails to recognize container representations, allowing public JWK containers to be accepted as HMAC secrets when an application supports bo...