Red Hat OpenStack Platform 13 (Queens)/python-jwt
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| PyJWT: PyJWKClient follows redirects when fetching JWKS | pyjwtAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 | PyPIRed Hat | High | Fix reported | |
| PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse | pyjwtAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 | PyPIRed Hat | Medium | No fix reported | |
| Key confusion through non-blocklisted public key formats | pyjwtRed Hat Ansible Automation Platform 2/automation-controller | PyPIRed Hat | High | Fix reported | |
| python-jwt vulnerable to token forgery with new claims | python-jwtRed Hat Ceph Storage 4/python-jwt | PyPIRed Hat | Critical | Fix reported |