Skip to content
OpenAdvisories

Package · Wolfi

py3-pyjwt

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 2.2
    CVE-2024-53861

    Issuer field partial matches allowed in pyjwt

    pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting in `"acb"` being accepted for `"_abc_"`. This is a bug introduced in version 2.10.0: checking the "iss" claim changed from `isinstance(issu…

    jpadilla pyjwt az pyjwt Wolfi PyPI