Pyjwt Project vulnerabilities
We track 2 vulnerabilities in Pyjwt Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2025.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Pyjwt Project vulnerabilities
- 7.0 High severity
Pyjwt: Missing Encryption of Sensitive Data
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in
- 7.5 High severity
pyjwt: Incorrect Comparison
pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting in `"acb"` being accepted for `"_abc_"`. This is a bug introduced in version 2.10.0: checking the "iss" claim changed from `isinstance(issue