pkg:PyPI/pyjwt

All known vulnerabilities

• HIGH7.5CVE-2026-32597PyJWT accepts unknown `crit` header extensions
  from 0, < 2.12.0
• HIGH7.5CVE-2026-32597PyJWT accepts unknown `crit` header extensions
  from 0, < 2.12.0
• HIGH7.5CVE-2017-11424pyjwt - security update
  from 0, < 1.5.1
• HIGH7.5pyjwt - security update
  from 0, < 1.5.1
• HIGH7.4PyJWT is a JSON Web Token implementation in Python.
  from 0, < 2.13.0
• HIGH7.4Key confusion through non-blocklisted public key formats
  >= 1.5.0, < 2.4.0
• HIGH7.4Key confusion through non-blocklisted public key formats
  from 0, < 9c528670c455b8d948aff95ed50e22940d1ad3fc | >= 1.5.0, < 2.4.0
• HIGH7.0pyjwt v2.10.1 was discovered to contain weak encryption.
  from 0, <= 2.10.1
• MEDIUM5.4PyJWT is a JSON Web Token implementation in Python.
  >= 2.9.0, < 2.12.1
• MEDIUM5.3PyJWT is a JSON Web Token implementation in Python.
  >= 2.8.0, < 2.13.0
• MEDIUM4.2PyJWT is a JSON Web Token implementation in Python.
  from 0, < 2.13.0
• LOW3.7PyJWT is a JSON Web Token implementation in Python.
  from 0, < 2.13.0
• LOW2.2PyJWT Issuer field partial matches allowed
  >= 2.10.0, < 2.10.1