Skip to content
OpenAdvisories

Package · PyPI

python-jwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2022-39227 Public exploit

    Python-jwt subject to Authentication Bypass by Spoofing

    python-jwt is a module for generating and verifying JSON Web Tokens. Versions prior to 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitr…

    davedoesdev python-jwt python-jwt PyPI