Known vulnerabilities in pyjwt 2.3.0

Vendor: jpadilla (José Padilla)
Software: pyjwt
Version: 2.3.0
Software CPE: cpe:2.3:a:jpadilla:pyjwt:*:*:*:*:*:*:*:*
Website: https://github.com/jpadilla/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting pyjwt version 2.3.0 pyjwt 2.3.0 is affected by 7 vulnerabilities: 3 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU132105 - Improper Verification of Cryptographic Signature
CVE-2026-48526		 CWE-347 Medium
No
No
 2.13.0 21.05.2026 SB2026052164
SB2026061959
SB20260625183
and 1 more
#VU132103 - Improper Cleanup on Thrown Exception
CVE-2026-48524		 CWE-460 Low
No
No
 2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 2 more
#VU132101 - Server-Side Request Forgery (SSRF)
CVE-2026-48522		 CWE-918 Low
No
No
 2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 3 more
#VU132102 - Externally Controlled Reference to a Resource in Another Sphere
 CWE-610 Low
No
No
 2.13.0 21.05.2026 SB2026052164
#VU132100 - Improper Verification of Cryptographic Signature
CVE-2026-48523		 CWE-347 Low
No
No
 2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 3 more
#VU128143 - Insufficient Verification of Data Authenticity
CVE-2026-32597		 CWE-345 Medium
No
No
 2.12.0 27.04.2026 SB20260427100
SB20260427131
SB20260427132
and 12 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-29217		 CWE-327 Medium
No
No
 2.4.0 13.05.2022 SB2022051319
SB2022071428
SB2022071429
and 12 more