HIGH 7.5 PyPI
GHSA-752w-5fwx-jx9f · CVE-2026-32597, PYSEC-2026-120 PyJWT accepts unknown `crit` header extensions
Modified: 6/8/2026
package
pkg:pypi/pyjwt
PyJWT accepts unknown `crit` header extensions
Modified: 6/8/2026
PyJWT Issuer field partial matches allowed
Modified: 2/4/2026
Key confusion through non-blocklisted public key formats
Modified: 10/15/2024
PyJWT vulnerable to key confusion attacks
Modified: 12/5/2024
Modified: 11/8/2023
Modified: 5/20/2026
Modified: 6/2/2026
Modified: 6/2/2026
Modified: 6/2/2026
Modified: 6/2/2026
Modified: 6/2/2026
Modified: 11/8/2023
Modified: 5/21/2026