pyjwt

Direct Vulnerabilities

Known vulnerabilities in the pyjwt package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Modification of Assumed-Immutable Data (MAID)	*
L TEMP-0781640-F16931	<1.3.0-1
H Insufficient Verification of Data Authenticity	<2.15.1-1
H Improper Handling of Exceptional Conditions	<2.15.1-1
L Improper Verification of Cryptographic Signature	<2.15.1-1
L Improper Verification of Cryptographic Signature	<2.15.1-1
L Improper Verification of Cryptographic Signature	<2.15.1-1
M Inefficient Regular Expression Complexity	<2.15.1-1
M Incorrect Behavior Order: Validate Before Canonicalize	<2.15.1-1
L Improper Verification of Cryptographic Signature	<2.15.1-1
C Information Exposure	<2.15.1-1
C Improper Verification of Cryptographic Signature	<2.15.1-1
L Uncontrolled Recursion	<2.15.1-1
H Uncaught Exception	<2.15.1-1
H Allocation of Resources Without Limits or Throttling	<2.15.1-1
L Improper Authentication	<2.13.0-1
L Resource Exhaustion	<2.13.0-1
L Improper Cleanup on Thrown Exception	<2.13.0-1
L Improper Verification of Cryptographic Signature	<2.13.0-1
L Unintended Proxy or Intermediary ('Confused Deputy')	<2.13.0-1
L Insufficient Verification of Data Authenticity	<2.6.0-1+deb12u1
L CVE-2025-45768	<2.13.0-1
H Use of a Broken or Risky Cryptographic Algorithm	<2.4.0-1
H CVE-2017-11424	<1.4.2-1.1