CVE-2022-39227

The CVE-2022-39227 issue affects the python-jwt library prior to 3.3.4, where an Authentication Bypass by Spoofing flaw allows forging JWT contents without the secret key. This can enable identity spoofing, session hijacking, or authentication bypass if an application relies on the token's claims...