pyjwt project
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 24 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 24, 2017 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
PyJWT accepts public JWK containers as HMAC secrets
PyJWT BOM Bypass
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
PyJWT: Non-canonical signature segments enable raw-token revocation bypass
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
Monitor pyjwt project in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.