TI-2026-65303 CVE-2026-102268 · GHSA-ffc3-869f-jxw9
Improper signature verification in jpadilla pyjwt
Priority HIGH 80
PyJWT is a Python implementation of JSON Web Token standards.
RHSA-2026:95267
RHTAS 1.5.1 - Tech Preview Release Of the Sigstore A2A 0.0.2
Released 2026-11-04 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.5 registry.redhat.io/rhtas/rh-sigstore-a2a-rhel9
Fixes 9 records
TI-2026-65307 CVE-2026-102272 · GHSA-r6x4-923q-g947
PyJWT BOM Bypass
Priority HIGH 68
PyJWT is a Python implementation of JSON Web Token standards.
TI-2026-65306 CVE-2026-102271 · GHSA-p4g4-x82p-q773
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
Priority HIGH 68
PyJWT is a Python implementation of JSON Web Token standards.
TI-2026-45177 CVE-2026-63374 · GHSA-82r6-8w77-94w6
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
Priority MEDIUM 48
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio.
TI-2026-65302 CVE-2026-102267 · GHSA-9v7f-9g4p-ffgj
PyJWT: PyJWKClient follows redirects when fetching JWKS
Priority MEDIUM 40
PyJWT is a Python implementation of JSON Web Token standards.
TI-2026-79318 CVE-2026-114605 · GHSA-45c3-73f7-pv4m
Excessive CPU use in dnspython DNS name parsing
Priority LOW 39
dnspython is a DNS toolkit for Python.
TI-2026-64264 CVE-2026-97689 · GHSA-vxq7-64xx-v4gw
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
Priority LOW 38
urllib3 is an HTTP client library for Python.
TI-2026-64262 CVE-2026-97687 · GHSA-8988-9cw3-xx77
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
Priority LOW 35
urllib3 is an HTTP client library for Python.
TI-2026-65308 CVE-2026-102273 · GHSA-w2cx-738m-mc7w
PyJWT accepts public JWK containers as HMAC secrets
Priority LOW 34
PyJWT is a Python implementation of JSON Web Token standards.