python-jwcrypto vulnerabilities (Azure Linux)

5 vulnerabilities.

• python-jwcrypto Azure Linux Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array CVE-2026-92091 Fix available 5.9 MediumSeptember 16, 2026
• python-jwcrypto Azure Linux Jwcrypto: jwcrypto: denial of service via malformed jwe tokens CVE-2026-80179 Fix available 5.9 MediumAugust 27, 2026
• python-jwcrypto Azure Linux JWCrypto: JWE ZIP decompression bomb CVE-2026-39373 Fix available 5.3 MediumApril 7, 2026
• python-jwcrypto Azure Linux JWCrypto vulnerable to JWT bomb Attack in `deserialize` function CVE-2024-28102 Fix available 6.8 MediumMarch 6, 2024
• python-jwcrypto Azure Linux Jwcrypto: denail of service via specifically crafted jwe CVE-2023-6681 Fix available 5.3 MediumDecember 28, 2023