Debian Bookworm DSA-6259-1 PyJWT Important Authentication Flaw

It was discovered that PyJWT, a Python implementation of JSON web tokens insufficiently validated the “crit” header parameter, which could result in incomplete enforcement of authentication settings. For the oldstable distribution (bookworm), this problem has been fixed in version 2.6.0-1+deb12u1.LinuxSecurity – Security AdvisoriesRead More