CLSA-2026-1793698392: TuxCare security update for pyjwt (4 CVEs)
Published Nov 3, 2026
·Updated
TuxCare rebuilt pyjwt to address 4 CVEs. Fixed in 2.8.0.post6+tuxcare.
Affected Software
1 affected componentFixes available
tuxcare/pyjwt>=2.8.0<2.8.0.post6+tuxcare
2.8.0.post6+tuxcare
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/pyjwtto a version that resolves this vulnerability.Fixed in 2.8.0.post6+tuxcare - Upgrade
Upgrade
pyjwtto a version that resolves this vulnerability.Fixed in 2.8.0.post6+tuxcare
Event History
Nov 3, 2026
Advisory Published
via OSV·10:33 AM
Data Sourced
via OSV·10:33 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
1
Which package version contains the fixes?
The fixes are included in pyjwt version 2.8.0.post6+tuxcare.
2
How many CVEs does this update address?
This update addresses four CVEs in the TuxCare rebuild of pyjwt.