Skip to content
OpenAdvisories

Package · Alpine

py3-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.4
    CVE-2022-29217

    Key confusion through non-blocklisted public key formats in PyJWT

    PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT token can choose the used signing algorithm. The PyJWT library requires that the application chooses what algorith…

    jpadilla pyjwt pyjwt pyjwt Debian Ubuntu Alpine PyPI