Red Hat OpenShift Container Platform 5/python-pyjwt

Red Hat · Package

8 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusionCVE-2026-102275 · GHSA-X33G-CR3X-6449Version ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-07
PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)CVE-2026-101917 · GHSA-2GX3-RCP4-G85QVersion ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)CVE-2026-101918 · GHSA-42VR-XJ54-VC7VVersion ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
PyJWT: Non-canonical signature segments enable raw-token revocation bypassCVE-2026-102269 · GHSA-HXM8-2XGR-2P9MVersion ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guardCVE-2026-102271 · GHSA-P4G4-X82P-Q773Version ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-10-01
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK SetCVE-2026-102274 · GHSA-W6J9-CWV2-H6WQVersion ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token headerCVE-2026-102265 · GHSA-8WJV-2P76-3863Version ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.CVE-2026-102270 · GHSA-JWRC-G2Q2-PQ5PVersion ranges need review.	pyjwt Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01