TI-2026-65303 CVE-2026-102268 · GHSA-ffc3-869f-jxw9
Improper signature verification in jpadilla pyjwt
Priority HIGH 80
PyJWT is a Python implementation of JSON Web Token standards.
RHSA-2026:95261
RHTAS 1.5.1 - Release of Model Transparency 1.0.6
Released 2026-11-04 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.5 registry.redhat.io/rhtas/model-transparency-rhel9
Fixes 8 records
TI-2026-82745 CVE-2026-119196 · GHSA-2qm8-x737-gmw5
Quadratic CPU consumption in pyasn1 constructed BIT STRING decoding
Priority HIGH 72
pyasn1 is a generic ASN.1 library for Python.
TI-2026-82744 CVE-2026-119195 · GHSA-9m75-vc3g-4x39
Quadratic-time denial of service in pyasn1 string and ANY decoding
Priority HIGH 72
pyasn1 is a generic ASN.1 library for Python.
TI-2026-82741 CVE-2026-119194 · GHSA-fm9c-5rcf-2q5p
Quadratic CPU use in pyasn1 schemaless BER/CER/DER decoding
Priority HIGH 72
pyasn1 is a generic ASN.1 library for Python.
TI-2026-65307 CVE-2026-102272 · GHSA-r6x4-923q-g947
PyJWT BOM Bypass
Priority HIGH 68
PyJWT is a Python implementation of JSON Web Token standards.
TI-2026-65306 CVE-2026-102271 · GHSA-p4g4-x82p-q773
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
Priority HIGH 68
PyJWT is a Python implementation of JSON Web Token standards.
TI-2026-79318 CVE-2026-114605 · GHSA-45c3-73f7-pv4m
Excessive CPU use in dnspython DNS name parsing
Priority LOW 39
dnspython is a DNS toolkit for Python.
TI-2026-65308 CVE-2026-102273 · GHSA-w2cx-738m-mc7w
PyJWT accepts public JWK containers as HMAC secrets
Priority LOW 34
PyJWT is a Python implementation of JSON Web Token standards.