CVE-2026-102265 | jpadilla PyJWT up to 2.13.x JWS Loading jwt/api_jws.py PyJWS._load recursion

September 28, 2026 Yanac

A vulnerability described as problematic has been identified in jpadilla PyJWT up to 2.13.x. Affected by this issue is the function PyJWS._load of the file jwt/api_jws.py of the component JWS Loading. The manipulation results in uncontrolled recursion.

This vulnerability is reported as CVE-2026-102265. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More