PY
Product
Pyjwt
24
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Severity mix
Critical 3High 13Medium 7Low 1
Watch
Add Pyjwt to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102268 | 9.1 | Sep 28 | PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard Affected: before 2.14.0 |
| CVE-2026-102267 | 9.1 | Sep 28 | PyJWT: PyJWKClient follows redirects when fetching JWKS Affected: before 2.14.0 |
| CVE-2026-102266 | 9.1 | Sep 28 | PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation Affected: 2.13.0 |
Showing 3