cve-2022-39227-jwt-auth-bypass-demo

CVE-2022-39227 JWT Authentication Bypass Demo Project Goal This project demonstrates the CVE-2022-39227 vulnerability in a controlled local lab environment. This vulnerability affects the python-jwt library versions 3.3.4 and allows an attacker to forge JWT claims without knowing the secret key b...

TencentOS Server 4: python-jwt (TSSA-2026:1087)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1087 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

EulerOS 2.0 SP13 : python-jwt (EulerOS-SA-2026-4185)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

EulerOS 2.0 SP13 : python-jwt (EulerOS-SA-2026-4094)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

CVE-2022-39227

CVE-2022-39227 CVE-2022-39227 : Proof of Concept Proof of concept for the CVE-2022-39227. According to this CVE, there is a flaw in the JSON Web Token verification. It is possible with a valid token to re-use its signature with modified claims. Required: 1. A valid JSON Web Token. 2. The backend...

EulerOS 2.0 SP15 : python-jwt (EulerOS-SA-2026-4008)

According to the versions of the python-jwt packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit Critical Header Parameter defined in RFC...

CVE-2026-103001 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-103001 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102270 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102270 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102272 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102272 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102268 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102268 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102273 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102273 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102267 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102267 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-101918 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-101918 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102274 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102274 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102266 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102266 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-101917 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-101917 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102275 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102275 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102271 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102271 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102265 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102265 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-102269 affecting package python-jwt for versions less than 2.15.1-1

CVE-2026-102269 affecting package python-jwt for versions less than 2.15.1-1. An upgraded version of the package is available that resolves this issue...