{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9571?format=json","vulnerability_id":"VCID-hsbn-cwfz-efh6","summary":"PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC. This vulnerability is fixed in 2.12.0.","aliases":[{"alias":"CVE-2026-32597"},{"alias":"GHSA-752w-5fwx-jx9f"},{"alias":"PYSEC-2026-120"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/203583?format=json","purl":"pkg:deb/debian/pyjwt@1.7.1-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pyjwt@1.7.1-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203588?format=json","purl":"pkg:deb/debian/pyjwt@1.7.1-2%2Bdeb11u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pyjwt@1.7.1-2%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203585?format=json","purl":"pkg:deb/debian/pyjwt@2.10.1-2%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pyjwt@2.10.1-2%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203584?format=json","purl":"pkg:deb/debian/pyjwt@2.12.1-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pyjwt@2.12.1-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203581?format=json","purl":"pkg:deb/debian/pyjwt@2.6.0-1%2Bdeb12u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/pyjwt@2.6.0-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/47648?format=json","purl":"pkg:pypi/pyjwt@2.12.0","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.12.0"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/8998?format=json","purl":"pkg:pypi/pyjwt@0.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/8999?format=json","purl":"pkg:pypi/pyjwt@0.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/9000?format=json","purl":"pkg:pypi/pyjwt@0.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/9001?format=json","purl":"pkg:pypi/pyjwt@0.1.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.4"},{"url":"http://public2.vulnerablecode.io/api/packages/9002?format=json","purl":"pkg:pypi/pyjwt@0.1.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.5"},{"url":"http://public2.vulnerablecode.io/api/packages/9003?format=json","purl":"pkg:pypi/pyjwt@0.1.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.6"},{"url":"http://public2.vulnerablecode.io/api/packages/9004?format=json","purl":"pkg:pypi/pyjwt@0.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.7"},{"url":"http://public2.vulnerablecode.io/api/packages/9005?format=json","purl":"pkg:pypi/pyjwt@0.1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.8"},{"url":"http://public2.vulnerablecode.io/api/packages/9006?format=json","purl":"pkg:pypi/pyjwt@0.1.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.1.9"},{"url":"http://public2.vulnerablecode.io/api/packages/9007?format=json","purl":"pkg:pypi/pyjwt@0.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9008?format=json","purl":"pkg:pypi/pyjwt@0.2.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.2.1"},{"url":"http://public2.vulnerablecode.io/api/packages/9009?format=json","purl":"pkg:pypi/pyjwt@0.2.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.2.3"},{"url":"http://public2.vulnerablecode.io/api/packages/9010?format=json","purl":"pkg:pypi/pyjwt@0.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9011?format=json","purl":"pkg:pypi/pyjwt@0.3.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.3.1"},{"url":"http://public2.vulnerablecode.io/api/packages/9012?format=json","purl":"pkg:pypi/pyjwt@0.3.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.3.2"},{"url":"http://public2.vulnerablecode.io/api/packages/9013?format=json","purl":"pkg:pypi/pyjwt@0.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9014?format=json","purl":"pkg:pypi/pyjwt@0.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/9015?format=json","purl":"pkg:pypi/pyjwt@0.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/9016?format=json","purl":"pkg:pypi/pyjwt@0.4.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f2z3-59j1-sbcz"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@0.4.3"},{"url":"http://public2.vulnerablecode.io/api/packages/9017?format=json","purl":"pkg:pypi/pyjwt@1.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9018?format=json","purl":"pkg:pypi/pyjwt@1.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/9019?format=json","purl":"pkg:pypi/pyjwt@1.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9020?format=json","purl":"pkg:pypi/pyjwt@1.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9021?format=json","purl":"pkg:pypi/pyjwt@1.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9022?format=json","purl":"pkg:pypi/pyjwt@1.4.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.4.1"},{"url":"http://public2.vulnerablecode.io/api/packages/9023?format=json","purl":"pkg:pypi/pyjwt@1.4.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.4.2"},{"url":"http://public2.vulnerablecode.io/api/packages/9024?format=json","purl":"pkg:pypi/pyjwt@1.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-wpjr-kr1k-rba8"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/9025?format=json","purl":"pkg:pypi/pyjwt@1.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/26520?format=json","purl":"pkg:pypi/pyjwt@1.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/26521?format=json","purl":"pkg:pypi/pyjwt@1.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26522?format=json","purl":"pkg:pypi/pyjwt@1.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/26523?format=json","purl":"pkg:pypi/pyjwt@1.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/26524?format=json","purl":"pkg:pypi/pyjwt@1.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/26525?format=json","purl":"pkg:pypi/pyjwt@1.6.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.6.4"},{"url":"http://public2.vulnerablecode.io/api/packages/26526?format=json","purl":"pkg:pypi/pyjwt@1.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/26527?format=json","purl":"pkg:pypi/pyjwt@1.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@1.7.1"},{"url":"http://public2.vulnerablecode.io/api/packages/26528?format=json","purl":"pkg:pypi/pyjwt@2.0.0a1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.0.0a1"},{"url":"http://public2.vulnerablecode.io/api/packages/26529?format=json","purl":"pkg:pypi/pyjwt@2.0.0a2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.0.0a2"},{"url":"http://public2.vulnerablecode.io/api/packages/26530?format=json","purl":"pkg:pypi/pyjwt@2.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/26531?format=json","purl":"pkg:pypi/pyjwt@2.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/26532?format=json","purl":"pkg:pypi/pyjwt@2.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/26533?format=json","purl":"pkg:pypi/pyjwt@2.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/26534?format=json","purl":"pkg:pypi/pyjwt@2.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-z91x-sjpt-7kf3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/26535?format=json","purl":"pkg:pypi/pyjwt@2.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/47640?format=json","purl":"pkg:pypi/pyjwt@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/47641?format=json","purl":"pkg:pypi/pyjwt@2.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/47642?format=json","purl":"pkg:pypi/pyjwt@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/47643?format=json","purl":"pkg:pypi/pyjwt@2.8.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.8.0"},{"url":"http://public2.vulnerablecode.io/api/packages/47644?format=json","purl":"pkg:pypi/pyjwt@2.9.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.9.0"},{"url":"http://public2.vulnerablecode.io/api/packages/47645?format=json","purl":"pkg:pypi/pyjwt@2.10.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-jwtj-frr1-z7fz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.10.0"},{"url":"http://public2.vulnerablecode.io/api/packages/47646?format=json","purl":"pkg:pypi/pyjwt@2.10.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.10.1"},{"url":"http://public2.vulnerablecode.io/api/packages/47647?format=json","purl":"pkg:pypi/pyjwt@2.11.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/pyjwt@2.11.0"},{"url":"http://public2.vulnerablecode.io/api/packages/108403?format=json","purl":"pkg:rpm/redhat/automation-controller@4.6.28-3?arch=el8ap","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n3b-ghpm-s3fb"},{"vulnerability":"VCID-cyv3-y3vz-zygw"},{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automation-controller@4.6.28-3%3Farch=el8ap"},{"url":"http://public2.vulnerablecode.io/api/packages/108404?format=json","purl":"pkg:rpm/redhat/automation-controller@4.6.28-3?arch=el9ap","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n3b-ghpm-s3fb"},{"vulnerability":"VCID-cyv3-y3vz-zygw"},{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automation-controller@4.6.28-3%3Farch=el9ap"},{"url":"http://public2.vulnerablecode.io/api/packages/108410?format=json","purl":"pkg:rpm/redhat/automation-controller@4.7.11-2?arch=el9ap","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-92bp-6kte-tyfs"},{"vulnerability":"VCID-cyv3-y3vz-zygw"},{"vulnerability":"VCID-e13q-66gf-67b1"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-rhdz-t1yf-p7cg"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/automation-controller@4.7.11-2%3Farch=el9ap"},{"url":"http://public2.vulnerablecode.io/api/packages/112213?format=json","purl":"pkg:rpm/redhat/fence-agents@4.2.1-129.el8_10?arch=25","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n3b-ghpm-s3fb"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-s88d-d5q8-6ycc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.2.1-129.el8_10%3Farch=25"},{"url":"http://public2.vulnerablecode.io/api/packages/112452?format=json","purl":"pkg:rpm/redhat/fence-agents@4.10.0-62.el9_4?arch=24","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n3b-ghpm-s3fb"},{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.10.0-62.el9_4%3Farch=24"},{"url":"http://public2.vulnerablecode.io/api/packages/112453?format=json","purl":"pkg:rpm/redhat/fence-agents@4.10.0-86.el9_6?arch=16","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n3b-ghpm-s3fb"},{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.10.0-86.el9_6%3Farch=16"},{"url":"http://public2.vulnerablecode.io/api/packages/112451?format=json","purl":"pkg:rpm/redhat/fence-agents@4.10.0-98.el9_7?arch=12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n3b-ghpm-s3fb"},{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.10.0-98.el9_7%3Farch=12"},{"url":"http://public2.vulnerablecode.io/api/packages/112222?format=json","purl":"pkg:rpm/redhat/fence-agents@4.10.0-110.el9_8?arch=2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-2n3b-ghpm-s3fb"},{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-s88d-d5q8-6ycc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.10.0-110.el9_8%3Farch=2"},{"url":"http://public2.vulnerablecode.io/api/packages/112225?format=json","purl":"pkg:rpm/redhat/fence-agents@4.16.0-5.el10_0?arch=9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-s88d-d5q8-6ycc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.16.0-5.el10_0%3Farch=9"},{"url":"http://public2.vulnerablecode.io/api/packages/112201?format=json","purl":"pkg:rpm/redhat/fence-agents@4.16.0-13.el10_1?arch=4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-s88d-d5q8-6ycc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.16.0-13.el10_1%3Farch=4"},{"url":"http://public2.vulnerablecode.io/api/packages/112221?format=json","purl":"pkg:rpm/redhat/fence-agents@4.16.0-21.el10_2?arch=1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"},{"vulnerability":"VCID-s88d-d5q8-6ycc"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/fence-agents@4.16.0-21.el10_2%3Farch=1"},{"url":"http://public2.vulnerablecode.io/api/packages/112449?format=json","purl":"pkg:rpm/redhat/python3.12-pyjwt@2.12.1-1?arch=el8ap","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python3.12-pyjwt@2.12.1-1%3Farch=el8ap"},{"url":"http://public2.vulnerablecode.io/api/packages/112450?format=json","purl":"pkg:rpm/redhat/python3.12-pyjwt@2.12.1-1?arch=el9ap","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-hsbn-cwfz-efh6"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/python3.12-pyjwt@2.12.1-1%3Farch=el9ap"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32597.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-32597.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-32597","reference_id":"","reference_type":"","scores":[{"value":"0.00014","scoring_system":"epss","scoring_elements":"0.02762","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-32597"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/jpadilla/pyjwt","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/jpadilla/pyjwt"},{"reference_url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-03-13T14:48:42Z/"}],"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2026/05/msg00008.html","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.debian.org/debian-lts-announce/2026/05/msg00008.html"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32597","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"HIGH","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-32597"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130662","reference_id":"1130662","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130662"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447194","reference_id":"2447194","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2447194"},{"reference_url":"https://github.com/advisories/GHSA-752w-5fwx-jx9f","reference_id":"GHSA-752w-5fwx-jx9f","reference_type":"","scores":[{"value":"HIGH","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-752w-5fwx-jx9f"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10140","reference_id":"RHSA-2026:10140","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10140"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10141","reference_id":"RHSA-2026:10141","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10141"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:10184","reference_id":"RHSA-2026:10184","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:10184"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:12176","reference_id":"RHSA-2026:12176","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:12176"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13508","reference_id":"RHSA-2026:13508","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13508"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13512","reference_id":"RHSA-2026:13512","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13512"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13545","reference_id":"RHSA-2026:13545","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13545"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13553","reference_id":"RHSA-2026:13553","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13553"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13672","reference_id":"RHSA-2026:13672","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13672"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:13916","reference_id":"RHSA-2026:13916","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:13916"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:17083","reference_id":"RHSA-2026:17083","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:17083"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19138","reference_id":"RHSA-2026:19138","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19138"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19355","reference_id":"RHSA-2026:19355","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19355"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19375","reference_id":"RHSA-2026:19375","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19375"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:19712","reference_id":"RHSA-2026:19712","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:19712"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21431","reference_id":"RHSA-2026:21431","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21431"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:21517","reference_id":"RHSA-2026:21517","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:21517"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6568","reference_id":"RHSA-2026:6568","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6568"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6720","reference_id":"RHSA-2026:6720","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6720"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6912","reference_id":"RHSA-2026:6912","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6912"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:6926","reference_id":"RHSA-2026:6926","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:6926"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8437","reference_id":"RHSA-2026:8437","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8437"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8746","reference_id":"RHSA-2026:8746","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8746"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8747","reference_id":"RHSA-2026:8747","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8747"},{"reference_url":"https://access.redhat.com/errata/RHSA-2026:8748","reference_id":"RHSA-2026:8748","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2026:8748"},{"reference_url":"https://usn.ubuntu.com/8133-1/","reference_id":"USN-8133-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/8133-1/"}],"weaknesses":[{"cwe_id":347,"name":"Improper Verification of Cryptographic Signature","description":"The product does not verify, or incorrectly verifies, the cryptographic signature for data."},{"cwe_id":345,"name":"Insufficient Verification of Data Authenticity","description":"The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data."},{"cwe_id":863,"name":"Incorrect Authorization","description":"The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"7.0 - 8.9","exploitability":"0.5","weighted_severity":"6.8","risk_score":3.4,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hsbn-cwfz-efh6"}