Lucene search

K
osvGoogleOSV:USN-5526-1
HistoryJul 20, 2022 - 1:09 a.m.

pyjwt vulnerability

2022-07-2001:09:23
Google
osv.dev
3

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

45.3%

Aapo Oksman discovered that PyJWT incorrectly handled signatures
constructed from SSH public keys. A remote attacker could use this to forge
a JWT signature.