Amazon Linux 2023 : python3-jwt, python3-jwt+crypto (ALAS2023-2026-3298)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3298 advisory. A flaw was found in PyJWT. A remote attacker can trigger a Denial of Service DoS through outbound request amplification by submitting tokens containing unknown key identifiers. Because the...