PyJWT vulnerabilities (Root)
12 vulnerabilities.
-
PyJWTRoot PyJWT accepts public JWK containers as HMAC secrets 7.4 High -
PyJWTRoot PyJWT BOM Bypass 7.4 High -
PyJWTRoot PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard 7.4 High -
PyJWTRoot PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard 9.1 Critical -
PyJWTRoot PyJWT: PyJWKClient follows redirects when fetching JWKS 7.4 High -
PyJWTRoot PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation 7.4 High -
PyJWTRoot PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS 5.3 Medium -
PyJWTRoot PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` keys 5.4 Medium -
PyJWTRoot PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed 7.4 High -
PyJWTRoot PyJWT: PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) 3.7 Low -
PyJWTRoot PyJWKClient: missing scheme allowlist enables SSRF + token forgery via file://, ftp://, data: schemes 4.2 Medium -
PyJWTRoot PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) 7.5 High