PyJWT Project PyJWT 2.10.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pyjwt_project:pyjwt:2.10.1:*:*:*:*:*:*:*

part: a version: 2.10.1 update: *

VendorPyjwt Project (a29c9aac-0bed-50ea-9640-6ee50b197df1)
ProductPyjwt (ba73b7dc-dee7-53e3-b202-d14980a80562)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/pyjwt purl2cpe 2026-06-08 08:49:52.309128
pkg:deb/ubuntu/pyjwt purl2cpe 2026-06-08 08:49:52.309129
pkg:github/jpadilla/pyjwt purl2cpe 2026-06-08 08:49:52.309130
pkg:pypi/pyjwt purl2cpe 2026-06-08 08:49:52.309132
pkg:rpm/opensuse/python-pyjwt purl2cpe 2026-06-08 08:49:52.309133

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-45768 vulnerable 2026-06-08 07:25:11.082796 Details available
pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).
Published: 2025-07-31T00:00:00.000Z
Updated: 2025-08-14T16:01:20.161Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.