Read the docs
Red Hat Security Advisory

RHSA-2026:19197

python-jwcrypto security update

Released 2026-05-19 · Red Hat rating Low · View on Red Hat →

Fixed in

Fixes 1 record

TI-2026-28360 CVE-2026-39373 · GHSA-fjrm-76x2-c4q4

JWCrypto: JWE ZIP decompression bomb

Priority MEDIUM 63

JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00306 Published 2026-04-07 Partial fix · 1.5.7 CWE-409