PYSEC-2026-4144 PyJWT: PyJWKClient follows redirects when fetching JWKS

Summary PyJWT 2.13.0 PyJWKClient followed HTTP redirects while fetching a JWKS, without validating the redirect destination. A configured trusted endpoint could therefore redirect the client to a different host. Impact When an application uses PyJWKClient with caller-supplied request headers and ...

PyJWT: PyJWKClient follows redirects when fetching JWKS

SummaryPyJWT 2.13.0 PyJWKClient followed HTTP redirects while fetching a JWKS,without validating the redirect destination. A configured trusted endpointcould therefore redirect the client to a different host. ImpactWhen an application uses PyJWKClient with caller-supplied request headers andan...

PT-2026-105891

Summary PyJWT 2.13.0 PyJWKClient followed HTTP redirects while fetching a JWKS, without validating the redirect destination. A configured trusted endpoint could therefore redirect the client to a different host. Impact When an application uses PyJWKClient with caller-supplied request headers and ...

GHSA-9V7F-9G4P-FFGJ PyJWT: PyJWKClient follows redirects when fetching JWKS

Summary PyJWT 2.13.0 PyJWKClient followed HTTP redirects while fetching a JWKS, without validating the redirect destination. A configured trusted endpoint could therefore redirect the client to a different host. Impact When an application uses PyJWKClient with caller-supplied request headers and ...

PyJWT: PyJWKClient follows redirects when fetching JWKS

Summary PyJWT 2.13.0 PyJWKClient followed HTTP redirects while fetching a JWKS, without validating the redirect destination. A configured trusted endpoint could therefore redirect the client to a different host. Impact When an application uses PyJWKClient with caller-supplied request headers and ...