PyJWT — security advisories

3 advisories1 sourcelatest 2026-08-06⚡ RSS feed

Every advisory CSIRTS.com has correlated to PyJWT, newest first — across national CERTs, vendor PSIRTs and vulnerability databases.

⚡ Watch PyJWT

Get an email when a new PyJWT advisory drops — max one per day, one-click unsubscribe.

CVE-2025-45768: pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

highCVSS 7CVE-2025-45768msrc2026-08-06

mediumCVSS 5.3CVE-2026-48525msrc2026-08-06

highCVSS 7.4CVE-2026-48526msrc2026-08-06