TI-2026-25107 CVE-2026-32597 · GHSA-752w-5fwx-jx9f
PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
Priority HIGH 72
PyJWT is a JSON Web Token implementation in Python.
python-jwt security update
Released 2026-11-02 · Red Hat rating Important · View on Red Hat →
PyJWT is a JSON Web Token implementation in Python.