Skip to content

Product

pypi python-jwt vulnerabilities

1 published CVE affecting pypi python-jwt, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
1
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest pypi python-jwt CVEs

Newest publication first

  1. CVE-2022-39227 Python-jwt subject to Authentication Bypass by Spoofing

    Published
    CriticalCVSS 9.1 EPSS 5.3%

    python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its conte...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.