CVE catalog

CVE-2022-29217

pyjwt affected and fixed versions

[CVE catalog]

PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT token can choose the used signing algorithm. The PyJWT library requires that the application chooses what algorithms are supported. The application can specify `jwt.algorithms.get_default_algorithms()` to get support for all algorithms, or specify a single algorithm. The issue is not that big as `algorithms=jwt.algorithms.get_default_algorithms()` has to be used. Users should upgrade to v2.4.0 to receive a patch for this issue. As a workaround, always be explicit with the algorithms that are accepted and expected when decoding.

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
1.35% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Debiantrixie-securitypyjwt2.10.1-2+deb13u1Fixed[CVE-2022-29217]
Debiantrixiepyjwt2.10.1-2+deb13u1Fixed[CVE-2022-29217]
Debiantrixiepyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debiansidpyjwt2.15.1-1Fixed[CVE-2022-29217]
Debiansidpyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debianforkypyjwt2.15.1-1Fixed[CVE-2022-29217]
Debianforkypyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debianbookworm-securitypyjwt2.6.0-1+deb12u1Fixed[CVE-2022-29217]
Debianbookwormpyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debianbookwormpyjwt2.6.0-1+deb12u1Fixed[CVE-2022-29217]

Showing 10 fix observations. All 61 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
Debianbookwormpyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debianbookwormpyjwt2.6.0-1+deb12u1Fixed[CVE-2022-29217]
Debianbookworm-securitypyjwt2.6.0-1+deb12u1Fixed[CVE-2022-29217]
Debianforkypyjwt2.15.1-1Fixed[CVE-2022-29217]
Debianforkypyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debiansidpyjwt2.15.1-1Fixed[CVE-2022-29217]
Debiansidpyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debiantrixiepyjwt2.10.1-2+deb13u1Fixed[CVE-2022-29217]
Debiantrixiepyjwt2.4.0-1FixedDistribution-reported fixed boundary[CVE-2022-29217]
Debiantrixie-securitypyjwt2.10.1-2+deb13u1Fixed[CVE-2022-29217]
Opensuseleap 15.3python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Opensuseleap 15.4python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Opensuseleap 15.4python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Opensusetumbleweedpython-PyJWT2.10.1-2.1UnknownSource applicability is not established[OPENSUSE-SU-2025:14987-1]
Suseenterprise storage 6python-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suseenterprise storage 7python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suseenterprise storage 7python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suseenterprise storage 7.1python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise high performance computing 15 sp1-espospython-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suselinux enterprise high performance computing 15 sp1-ltsspython-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suselinux enterprise high performance computing 15 sp2-espospython-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise high performance computing 15 sp2-ltsspython-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise high performance computing 15 sp2-ltsspython-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise high performance computing 15 sp3-espospython-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise high performance computing 15 sp3-ltsspython-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise module for basesystem 15 sp3python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise module for basesystem 15 sp4python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise module for basesystem 15 sp4python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise module for package hub 15 sp3python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise module for public cloud 12python-PyJWT1.5.3-3.16.1UnknownSource applicability is not established[SUSE-SU-2022:2401-1]
Suselinux enterprise module for public cloud 15python-PyJWT1.5.3-150000.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:3545-1]
Suselinux enterprise module for public cloud 15 sp1python-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suselinux enterprise module for public cloud 15 sp2python-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suselinux enterprise real time 15 sp3python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise server 15 sp1-bclpython-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suselinux enterprise server 15 sp1-ltsspython-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suselinux enterprise server 15 sp2-bclpython-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise server 15 sp2-ltsspython-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise server 15 sp2-ltsspython-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise server 15 sp3-ltsspython-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise server for sap applications 15 sp1python-PyJWT1.7.1-150100.6.7.1UnknownSource applicability is not established[SUSE-SU-2022:2403-1]
Suselinux enterprise server for sap applications 15 sp2python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Suselinux enterprise server for sap applications 15 sp2python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Suselinux enterprise server for sap applications 15 sp3python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Susemanager proxy 4.1python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Susemanager proxy 4.2python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Susemanager retail branch server 4.1python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Susemanager server 4.1python-PyJWT1.7.1-150200.3.3.1UnknownSource applicability is not established[SUSE-SU-2022:2402-1]
Susemanager server 4.2python-PyJWT2.4.0-150200.3.6.2UnknownSource applicability is not established[SUSE-SU-2023:0794-1]
Ubuntu18.04pyjwt1.4.2-1.1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu18.04pyjwt1.5.3+ds1-1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu18.04pyjwt1.5.3+ds1-1ubuntu0.1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu20.04pyjwt1.7.0-2UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu20.04pyjwt1.7.1-1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu20.04pyjwt1.7.1-2ubuntu1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu20.04pyjwt1.7.1-2ubuntu2UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu20.04pyjwt1.7.1-2ubuntu2.1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu22.04pyjwt1.7.1-2ubuntu2UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu22.04pyjwt2.1.0-1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu22.04pyjwt2.3.0-1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Ubuntu22.04pyjwt2.3.0-1ubuntu0.1UnknownSource applicability is not established[USN-5526-1][UBUNTU-CVE-2022-29217]
Original provider fields
{
  "package_releases": [
    {
      "name": "pyjwt",
      "status": "fixed",
      "release": "sid",
      "version": "2.15.1-1"
    },
    {
      "name": "pyjwt",
      "status": "fixed",
      "release": "forky",
      "version": "2.15.1-1"
    },
    {
      "name": "pyjwt",
      "status": "fixed",
      "release": "trixie",
      "version": "2.10.1-2+deb13u1"
    },
    {
      "name": "pyjwt",
      "status": "fixed",
      "release": "trixie-security",
      "version": "2.10.1-2+deb13u1"
    },
    {
      "name": "pyjwt",
      "status": "fixed",
      "release": "bookworm",
      "version": "2.6.0-1+deb12u1"
    },
    {
      "name": "pyjwt",
      "status": "fixed",
      "release": "bookworm-security",
      "version": "2.6.0-1+deb12u1"
    }
  ],
  "fixed_versions": [
    {
      "bug": 1011747,
      "name": "pyjwt",
      "type": "source",
      "origin": null,
      "release": "sid",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.0-1"
    },
    {
      "bug": 1011747,
      "name": "pyjwt",
      "type": "source",
      "origin": null,
      "release": "forky",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.0-1"
    },
    {
      "bug": 1011747,
      "name": "pyjwt",
      "type": "source",
      "origin": null,
      "release": "trixie",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.0-1"
    },
    {
      "bug": 1011747,
      "name": "pyjwt",
      "type": "source",
      "origin": null,
      "release": "bookworm",
      "urgency": "not yet assigned",
      "fixed_version": "2.4.0-1"
    }
  ],
  "distribution_packages": [
    {
      "name": "pyjwt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.5.3+ds1-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1.4.2-1.1",
        "1.5.3+ds1-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5526-1",
      "fixed_version": "1.5.3+ds1-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-5526-1",
      "provider_updated_at": "2026-02-10T04:42:42Z",
      "applicability_unknown": true
    },
    {
      "name": "pyjwt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-2ubuntu2.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "1.7.0-2",
        "1.7.1-1",
        "1.7.1-2ubuntu1",
        "1.7.1-2ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5526-1",
      "fixed_version": "1.7.1-2ubuntu2.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-5526-1",
      "provider_updated_at": "2026-02-10T04:42:42Z",
      "applicability_unknown": true
    },
    {
      "name": "pyjwt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.0-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1.7.1-2ubuntu2",
        "2.1.0-1",
        "2.3.0-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/USN-5526-1",
      "fixed_version": "2.3.0-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "USN-5526-1",
      "provider_updated_at": "2026-02-10T04:42:42Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise real time 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "manager proxy 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "manager server 4.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "enterprise storage 7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.4.0-150200.3.6.2"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2023:0794-1",
      "fixed_version": "2.4.0-150200.3.6.2",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2023:0794-1",
      "provider_updated_at": "2026-02-04T04:29:41.916543Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.5.3-3.16.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for public cloud 12",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2401-1",
      "fixed_version": "1.5.3-3.16.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2401-1",
      "provider_updated_at": "2026-02-04T04:01:43.408215Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.10.1-2.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2025:14987-1",
      "fixed_version": "2.10.1-2.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2025:14987-1",
      "provider_updated_at": "2026-02-04T03:38:28.763124Z",
      "applicability_unknown": true
    },
    {
      "name": "pyjwt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.5.3+ds1-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "18.04",
      "versions": [
        "1.4.2-1.1",
        "1.5.3+ds1-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-29217",
      "fixed_version": "1.5.3+ds1-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-29217",
      "provider_updated_at": "2026-02-04T03:26:48.979638Z",
      "applicability_unknown": true
    },
    {
      "name": "pyjwt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-2ubuntu2.1"
            }
          ]
        }
      ],
      "release": "20.04",
      "versions": [
        "1.7.0-2",
        "1.7.1-1",
        "1.7.1-2ubuntu1",
        "1.7.1-2ubuntu2"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-29217",
      "fixed_version": "1.7.1-2ubuntu2.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-29217",
      "provider_updated_at": "2026-02-04T03:26:48.979638Z",
      "applicability_unknown": true
    },
    {
      "name": "pyjwt",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.3.0-1ubuntu0.1"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "1.7.1-2ubuntu2",
        "2.1.0-1",
        "2.3.0-1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-29217",
      "fixed_version": "2.3.0-1ubuntu0.1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2022-29217",
      "provider_updated_at": "2026-02-04T03:26:48.979638Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.5.3-150000.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for public cloud 15",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:3545-1",
      "fixed_version": "1.5.3-150000.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:3545-1",
      "provider_updated_at": "2026-02-04T02:58:18.139679Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for public cloud 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for public cloud 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp1-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150100.6.7.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 6",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2403-1",
      "fixed_version": "1.7.1-150100.6.7.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2403-1",
      "provider_updated_at": "2025-05-02T04:33:05.620178Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for basesystem 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for package hub 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-bcl",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "manager proxy 4.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "manager retail branch server 4.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "manager server 4.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    },
    {
      "name": "python-PyJWT",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.7.1-150200.3.3.1"
            }
          ]
        }
      ],
      "release": "leap 15.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2022:2402-1",
      "fixed_version": "1.7.1-150200.3.3.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2022:2402-1",
      "provider_updated_at": "2025-05-02T04:33:05.559599Z",
      "applicability_unknown": true
    }
  ]
}

[Debian bug #1011747]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [python3-jwt]Unknown

    Source package: [pyjwt]

    Details (4)

    • 2.6.0-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.0-1

      dsa · pyjwt · debian · bookworm

    • 2.6.0-1+deb12u1 · all · bookworm

      Fixed · Fixed: 2.4.0-1

      dsa · pyjwt · debian · bookworm

    • 2.6.0-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.4.0-1

      dsa · pyjwt · debian · bookworm

    • 2.6.0-1+deb12u1 · all · bookworm-security

      Fixed · Fixed: 2.4.0-1

      dsa · pyjwt · debian · bookworm

[openSUSE Tumbleweed]

  • [python313-PyJWT]Unknown

    Source package: [python-PyJWT]

    Details (1)

    • 2.13.0-1.2 · noarch · tumbleweed

      Unknown · Fixed: 2.10.1-2.1

      Version impact unknown

      dsa · python-PyJWT · opensuse · tumbleweed

  • [python314-PyJWT]Unknown

    Source package: [python-PyJWT]

    Details (1)

    • 2.13.0-1.2 · noarch · tumbleweed

      Unknown · Fixed: 2.10.1-2.1

      Version impact unknown

      dsa · python-PyJWT · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]