CVE-2026-102273 | jpadilla PyJWT up to 2.13.x HMAC Key Guard HMACAlgorithm.prepare_key signature verification

September 28, 2026 Yanac

A vulnerability classified as critical has been found in jpadilla PyJWT up to 2.13.x. This affects the function HMACAlgorithm.prepare_key of the component HMAC Key Guard. This manipulation causes improper verification of cryptographic signature.

This vulnerability appears as CVE-2026-102273. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More