PY
Product
pyjwt
20
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 3High 9Medium 7Low 1
Watch
Add pyjwt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102268 | 9.1 | Sep 28 | PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard Affected: < 2.14.0 |
| CVE-2026-102267 | 9.1 | Sep 28 | PyJWT: PyJWKClient follows redirects when fetching JWKS Affected: < 2.14.0 |
| CVE-2026-102266 | 9.1 | Sep 28 | PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation Affected: >= 2.13.0, < 2.14.0 |
Showing 3