7.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.3%
Aapo Oksman discovered that PyJWT incorrectly handled signatures constructed from SSH public keys. A remote attacker could use this to forge a JWT signature.
ubuntu.com/security/CVE-2022-29217
ubuntu.com/security/notices/USN-5526-1