PyJWT — security advisories

4 advisorieslatest 2026-08-06⚡ RSS feed

Tracked PyJWT products:

⚡ Watch PyJWT

Get an email when a new PyJWT advisory drops — max one per day, one-click unsubscribe.

CVE-2025-45768: pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

highCVSS 7CVE-2025-45768msrc2026-08-06

mediumCVSS 4.2CVE-2026-48522msrc2026-08-06

mediumCVSS 5.3CVE-2026-48525msrc2026-08-06

highCVSS 7.4CVE-2026-48526msrc2026-08-06