Known vulnerabilities in pyjwt 2.3.0

Software: pyjwt
Version: 2.3.0
Software CPE: cpe:2.3:a:jpadilla:pyjwt:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting pyjwt version 2.3.0 pyjwt 2.3.0 is affected by 14 vulnerabilities: 1 high, 9 medium, 4 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151960 - Insufficient Verification of Data Authenticity
CVE-2026-102275
CWE-345 Medium
No
No
2.15.0 24.09.2026 SB2026092476
SB20261022526
#VU151959 - Uncaught Exception
CVE-2026-101918
CWE-248 Medium
No
No
2.15.0 24.09.2026 SB2026092476
SB20261022526
#VU150530 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
2.14.0 17.09.2026 SB20260917213
#VU150527 - Server-Side Request Forgery (SSRF)
CVE-2026-102267
CWE-918 Medium
No
No
2.14.0 17.09.2026 SB20260917213
SB2026101637
SB2026101638
and 2 more
#VU150525 - Improper Verification of Cryptographic Signature
CVE-2026-102268
CWE-347 High
No
No
2.14.0 17.09.2026 SB20260917213
SB2026101637
SB2026101638
and 2 more
#VU150521 - Uncontrolled Recursion
CVE-2026-102265
CWE-674 Medium
No
No
2.14.0 17.09.2026 SB20260917213
SB20261022526
#VU150520 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-102269
CWE-180 Medium
No
No
2.14.0 17.09.2026 SB20260917213
SB20261022526
#VU132105 - Improper Verification of Cryptographic Signature
CVE-2026-48526
CWE-347 Medium
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB20260625183
and 2 more
#VU132103 - Improper Cleanup on Thrown Exception
CVE-2026-48524
CWE-460 Low
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 3 more
#VU132101 - Server-Side Request Forgery (SSRF)
CVE-2026-48522
CWE-918 Low
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 4 more
#VU132102 - Externally Controlled Reference to a Resource in Another Sphere
CWE-610 Low
No
No
2.13.0 21.05.2026 SB2026052164
#VU132100 - Improper Verification of Cryptographic Signature
CVE-2026-48523
CWE-347 Low
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 4 more
#VU128143 - Insufficient Verification of Data Authenticity
CVE-2026-32597
CWE-345 Medium
No
No
2.12.0 27.04.2026 SB20260427100
SB20260427131
SB20260427132
and 12 more
#VU63168 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2022-29217
CWE-327 Medium
No
No
2.4.0 13.05.2022 SB2022051319
SB2022071428
SB2022071429
and 12 more