PyJWT@2.1.0 vulnerabilities

JSON Web Token implementation in Python

Direct Vulnerabilities

Known vulnerabilities in the PyJWT package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Use of a Broken or Risky Cryptographic Algorithm

PyJWT is a Python implementation of RFC 7519.

Affected versions of this package are vulnerable to Use of a Broken or Risky Cryptographic Algorithm via non-blacklisted public key formats, leading to key confusion.

How to fix Use of a Broken or Risky Cryptographic Algorithm?

Upgrade PyJWT to version 2.4.0 or higher.

[1.5.0,2.4.0)