Known vulnerabilities in pyjwt

Software: pyjwt
Software CPE: cpe:2.3:a:jpadilla:pyjwt:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting pyjwt pyjwt is affected by 23 known vulnerabilities: 2 high, 16 medium, 5 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU151960 - Insufficient Verification of Data Authenticity
CVE-2026-102275
CWE-345 Medium
No
No
2.15.0 24.09.2026 SB2026092476
SB20261022526
#VU151959 - Uncaught Exception
CVE-2026-101918
CWE-248 Medium
No
No
2.15.0 24.09.2026 SB2026092476
SB20261022526
#VU151958 - Modification of Assumed-Immutable Data
CWE-471 Medium
No
No
2.14.0 24.09.2026 SB20260917213
#VU151957 - Improper Handling of Exceptional Conditions
CWE-755 Medium
No
No
2.14.0 24.09.2026 SB20260917213
#VU150530 - Improper Verification of Cryptographic Signature
CWE-347 Medium
No
No
2.14.0 17.09.2026 SB20260917213
#VU150528 - Improper Verification of Cryptographic Signature
CVE-2026-102273
CWE-347 Medium
No
No
2.14.0 17.09.2026 SB20260917213
#VU150527 - Server-Side Request Forgery (SSRF)
CVE-2026-102267
CWE-918 Medium
No
No
2.14.0 17.09.2026 SB20260917213
SB2026101637
SB2026101638
and 2 more
#VU150525 - Improper Verification of Cryptographic Signature
CVE-2026-102268
CWE-347 High
No
No
2.14.0 17.09.2026 SB20260917213
SB2026101637
SB2026101638
and 2 more
#VU150524 - Improper Verification of Cryptographic Signature
CVE-2026-102271
CWE-347 Medium
No
No
2.14.0 17.09.2026 SB20260917213
SB2026101637
SB2026101638
and 2 more
#VU150522 - Improper Verification of Cryptographic Signature
CVE-2026-102266
CWE-347 Medium
No
No
2.14.0 17.09.2026 SB20260917213
#VU150521 - Uncontrolled Recursion
CVE-2026-102265
CWE-674 Medium
No
No
2.14.0 17.09.2026 SB20260917213
SB20261022526
#VU150520 - Incorrect Behavior Order: Validate Before Canonicalize
CVE-2026-102269
CWE-180 Medium
No
No
2.14.0 17.09.2026 SB20260917213
SB20261022526
#VU150519 - Modification of Assumed-Immutable Data
CVE-2026-103001
CWE-471 Medium
No
No
2.14.0 17.09.2026 SB20260917213
#VU132105 - Improper Verification of Cryptographic Signature
CVE-2026-48526
CWE-347 Medium
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB20260625183
and 2 more
#VU132104 - Resource exhaustion
CVE-2026-48525
CWE-400 Medium
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 4 more
#VU132103 - Improper Cleanup on Thrown Exception
CVE-2026-48524
CWE-460 Low
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 3 more
#VU132101 - Server-Side Request Forgery (SSRF)
CVE-2026-48522
CWE-918 Low
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 4 more
#VU132102 - Externally Controlled Reference to a Resource in Another Sphere
CWE-610 Low
No
No
2.13.0 21.05.2026 SB2026052164
#VU132100 - Improper Verification of Cryptographic Signature
CVE-2026-48523
CWE-347 Low
No
No
2.13.0 21.05.2026 SB2026052164
SB2026061959
SB2026061972
and 4 more
#VU128143 - Insufficient Verification of Data Authenticity
CVE-2026-32597
CWE-345 Medium
No
No
2.12.0 27.04.2026 SB20260427100
SB20260427131
SB20260427132
and 12 more


Showing elements 1 - 20 out of 23