Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Satellite 6/python3.12-pyjwt
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
CVE-2026-102275 · GHSA-X33G-CR3X-6449
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-07
PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
CVE-2026-101917 · GHSA-2GX3-RCP4-G85Q
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: PyJWKClient follows redirects when fetching JWKS
CVE-2026-102267 · GHSA-9V7F-9G4P-FFGJ
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
PyJWT accepts public JWK containers as HMAC secrets
CVE-2026-102273 · GHSA-W2CX-738M-MC7W
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
CVE-2026-101918 · GHSA-42VR-XJ54-VC7V
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT BOM Bypass
CVE-2026-102272 · GHSA-R6X4-923Q-G947
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
PyJWT: Non-canonical signature segments enable raw-token revocation bypass
CVE-2026-102269 · GHSA-HXM8-2XGR-2P9M
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
CVE-2026-103001 · GHSA-GVP8-978C-RX2Q
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
No fix reported
2026-10-01
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
CVE-2026-102274 · GHSA-W6J9-CWV2-H6WQ
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
CVE-2026-102265 · GHSA-8WJV-2P76-3863
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
CVE-2026-102270 · GHSA-JWRC-G2Q2-PQ5P
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
CVE-2026-102268 · GHSA-FFC3-869F-JXW9
Version ranges need review.
pyjwt
Lightspeed Core/lightspeed-core/lightspeed-stack-rhel9
PyPI
Red Hat
Critical
Fix reported
2026-10-01
