Update Info

openSUSE-2026-130


Security update for python-jwcrypto


Type: security
Severity: important
Issued: 2026-04-16
Description:
This update for python-jwcrypto fixes the following issues:

- CVE-2022-3102: jwcrypto token substitution can lead to authentication bypass (boo#1209496)
- CVE-2023-6681: denial of service Via specifically crafted JWE (boo#1219837)
- CVE-2024-28102: malicious JWE token can cause denial of service (boo#1221230)
- CVE-2026-39373: Memory exhaustion via crafted compressed JWE tokens (boo#1261802)


              

Packages


  • python-jwcrypto-0.7-bp156.4.3.1