python3Packages.pyjwt

pyjwt 2.14.0 · pkgs/development/python-modules/pyjwt/default.nix

Health

Risk

risk 28 medium

+20 2 open advisories
+8 an OSV advisory has a public exploit (CISA)

Version

2.14.0 no newer release known to repology

Channels

master 2.14.0 · nixos-unstable 2.14.0 · nixos-26.05 2.14.0 no channel is behind master

Hydra

succeeded 10y ago

Advisories

GHSA-42vr-xj54-vc7v medium 5.3 public exploit EPSS 0.4% PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False) (OSV, for this version)

CVE-2026-101918

GHSA-x33g-cr3x-6449 medium 6.5 public exploit EPSS 0.1% PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion (OSV, for this version)

CVE-2026-102275

Packaging

not read yet: the next index sweep reads it

Maintainers

prikhi

Pull requests 0

None open.

Closed or merged in the synced window 4

python3Packages.pyjwt: 2.14.0 -> 2.15.1 draft

#570715 by tebriel · closed 10d ago

python3Packages.pyjwt: 2.14.0 -> 2.15.1

#569849 by ShadowRZ · merged 13d ago