Root has patched CVE-2026-48522 in the rootio-PyJWT package for Root:PyPI. Multiple fixed versions available.
{ "distro": "pypi", "severity": "MEDIUM", "source": "Root", "distro_version": "" }
1.0
"root.io.6"
"2.9.0"
[ "2.9.0+root.io.6" ]
true
"https://api.root.io/external/osv/ROOT-APP-PYPI-CVE-2026-48522.json"