cbcvebase.

Jpadilla Pyjwt vulnerabilities

21 known vulnerabilities affecting jpadilla/pyjwt.

Total CVEs
21
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH10MEDIUM7LOW1

Vulnerabilities

Page 2 of 2
CVE-2026-48524P4LOWCVSS 3.7fixed in 2.13.02026-05-28
CVE-2026-48524 [LOW] CWE-460 CVE-2026-48524: PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signing_key() f PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.get_signing_key() forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no rate limiting. Since kid comes from the unverified token header, an attacker can trigger unlimited outbound requests. The vulnerability surfaces only when a
nvd
← Previous2 / 2
Jpadilla Pyjwt vulnerabilities | cvebase