CVE-2026-102275 | jpadilla PyJWT up to 2.14.x OKPAlgorithm jwt/algorithms.py OKPAlgorithm.from_jwk comparison

September 28, 2026 Yanac

A vulnerability labeled as critical has been found in jpadilla PyJWT up to 2.14.x. Affected is the function OKPAlgorithm.from_jwk of the file jwt/algorithms.py of the component OKPAlgorithm. Executing a manipulation can lead to incorrect comparison.

This vulnerability is registered as CVE-2026-102275. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More