Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-752w-5fwx-jx9f
  • PyPI/pyjwt
 PyJWT accepts unknown `crit` header extensions 13 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-75c5-xw7c-p5pm
  • PyPI/pyjwt
 PyJWT Issuer field partial matches allowed 02 Dec 2024
  • Fix available
  • Severity - 2.1 (Low)
GHSA-ffqj-6fqr-9h24
  • PyPI/pyjwt
 Key confusion through non-blocklisted public key formats 24 May 2022
  • Fix available
  • Severity - 7.4 (High)
PYSEC-2022-202
  • PyPI/pyjwt
  • github.com/jpadilla/pyjwt
 See record for full details 24 May 2022
  • Fix available
GHSA-r9jw-mwhq-wp62
  • PyPI/pyjwt
 PyJWT vulnerable to key confusion attacks 13 May 2022
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2017-24
  • PyPI/pyjwt
 See record for full details 24 Aug 2017
  • Fix available