CLEANSTART-2026-CY25478: PyJWT is a JSON Web Token implementation in Python

Q: What does an attacker need to exploit this issue?

The vulnerability is network-reachable and does not require prior privileges or user interaction. Exploitation has high attack complexity.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation can have a high impact on confidentiality and integrity. No availability impact is indicated, and the affected security scope is unchanged.

Published Nov 3, 2026

Updated

Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python.

Affected Software

3 affected componentsFixes available

cleanstart/apache-superset<2021.36.5-r0

2021.36.5-r0

cleanstart/apache-superset<2021.38.2-r0

2021.38.2-r0

cleanstart/apache-superset<2021.40.1-r2

2021.40.1-r2

Event History

Nov 3, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-48526

Frequently Asked Questions

What does an attacker need to exploit this issue?

The vulnerability is network-reachable and does not require prior privileges or user interaction. Exploitation has high attack complexity.

What is the potential impact if exploitation succeeds?

Successful exploitation can have a high impact on confidentiality and integrity. No availability impact is indicated, and the affected security scope is unchanged.

CLEANSTART-2026-CY25478: PyJWT is a JSON Web Token implementation in Python

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?