TI-2026-35886 CVE-2026-48526 · GHSA-xgmm-8j9v-c9wx
PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed
Priority HIGH 68
PyJWT is a JSON Web Token implementation in Python.
RHTAS 1.3.6 - Red Hat Trusted Artifact Signer Release
Released 2026-07-16 · Red Hat rating Important · View on Red Hat →
PyJWT is a JSON Web Token implementation in Python.