CVE-2026-102271 | jpadilla PyJWT up to 2.13.x HMACAlgorithm HMACAlgorithm.prepare_key signature verification

SecurityVulns

A vulnerability was found in jpadilla PyJWT up to 2.13.x. It has been rated as critical. The impacted element is the function HMACAlgorithm.prepare_key of the component HMACAlgorithm. This manipulation causes improper verification of cryptographic signature.

This vulnerability is tracked as CVE-2026-102271. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More