PyJWT — CVE history (PyPI)
PyJWT
24 CVEs affect the PyJWT PyPI package (highest CVSS 9.1). Latest disclosed: 2026-09-30. Full CVE history sourced from NVD.
Summary
- Package
PyJWT(PyPI)- Total CVEs
24- Actively exploited (CISA KEV)
- 0
- Highest CVSS
9.1- Latest disclosed
- 2026-09-30
Recent CVEs (top 20)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-103001 | Medium | 6.5 | — | 2026-09-30 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102275 | Medium | 6.5 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102274 | Medium | 5.9 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102273 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102272 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102271 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102270 | Medium | 4.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102269 | Medium | 4.8 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102268 | Critical | 9.1 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102267 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102266 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102265 | Medium | 5.3 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-101918 | Medium | 5.3 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-101917 | Medium | 5.3 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-48526 | High | 7.4 | — | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. |
CVE-2026-48525 | Medium | 5.3 | — | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. |
CVE-2026-48524 | Low | 3.7 | — | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. |
CVE-2026-48523 | Medium | 5.4 | — | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. |
CVE-2026-48522 | Medium | 4.2 | — | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. |
CVE-2026-32597 | High | 7.5 | — | 2026-03-13 | PyJWT is a JSON Web Token implementation in Python. |
All-time worst (top 10 by CVSS)
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-102268 | Critical | 9.1 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-32597 | High | 7.5 | — | 2026-03-13 | PyJWT is a JSON Web Token implementation in Python. |
CVE-2017-11424 | High | 7.5 | — | 2017-08-24 | In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys. |
CVE-2026-102273 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102272 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102271 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102267 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-102266 | High | 7.4 | — | 2026-09-28 | PyJWT is a Python implementation of JSON Web Token standards. |
CVE-2026-48526 | High | 7.4 | — | 2026-05-28 | PyJWT is a JSON Web Token implementation in Python. |
CVE-2022-29217 | High | 7.4 | — | 2022-05-24 | PyJWT is a Python implementation of RFC 7519. |