CLEANSTART-2026-CF38421: PyJWT is a Python implementation of JSON Web Token standards

Q: What access does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-reachable, has low attack complexity, requires high privileges, and does not require user interaction.

Q: What is the expected security impact if exploitation succeeds?

The reported impact is limited to availability, with no reported confidentiality or integrity impact.

Q: Which listed deployments should be reviewed for exposure?

Review deployments of cleanstart/apache-superset and cleanstart/airflow-3, which are identified as affected software entries for this advisory.

Published Nov 3, 2026

Updated

CVE-2026-102270 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details.

Affected Software

3 affected componentsFixes available

cleanstart/apache-superset<2021.36.5-r0

2021.36.5-r0

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-102270

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The CVSS vector indicates that exploitation is network-reachable, has low attack complexity, requires high privileges, and does not require user interaction.

What is the expected security impact if exploitation succeeds?

The reported impact is limited to availability, with no reported confidentiality or integrity impact.

Which listed deployments should be reviewed for exposure?

Review deployments of cleanstart/apache-superset and cleanstart/airflow-3, which are identified as affected software entries for this advisory.

CLEANSTART-2026-CF38421: PyJWT is a Python implementation of JSON Web Token standards

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?

Which listed deployments should be reviewed for exposure?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the expected security impact if exploitation succeeds?

Which listed deployments should be reviewed for exposure?