CVE-2026-102275

PyJWT is a Python implementation of JSON Web Token standards.

Pyjwt

PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from_jwk in jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding x and d components. As a result, identity derived from x can differ from operations performed with d. Consequently, if an integration also accepts private key parameters from a…

28. Sep 2026

Ausgewertete Quellen

• NVD
  CVE-2026-102275
• GitHub
  https://github.com/jpadilla/pyjwt/security/advisories/GHSA-x33g-cr3x-6449