CVE-2026-102274 | jpadilla PyJWT up to 2.13.x PyJWKSet jwt/api_jwk.py RSAAlgorithm.from_jwk denial of service

September 28, 2026 Yanac

A vulnerability classified as problematic was found in jpadilla PyJWT up to 2.13.x. This vulnerability affects the function RSAAlgorithm.from_jwk of the file jwt/api_jwk.py of the component PyJWKSet. Such manipulation leads to denial of service.

This vulnerability is traded as CVE-2026-102274. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More