Skip to content
OpenAdvisories
Medium ALAS2023-2026-1467 1 CVE

Moderate: python-jwt security update (Amazon Linux 2023)

Published Mar 2, 2026 · Updated Mar 5, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2025-45768: pyjwt v2.10.1 was discovered to contain weak encryption.

Fixed packages 2

ReleasePackageFixed in
Amazon Linux · 2023 python3-jwt 0:2.4.0-1.amzn2023.0.2
Amazon Linux · 2023 python3-jwt+crypto 0:2.4.0-1.amzn2023.0.2

Vulnerabilities 1

  • High 7.0
    CVE-2025-45768

    pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length …

    pyjwt pyjwt Debian PyPI

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2025-45768.html