CVE-2026-101917 | jpadilla PyJWT up to 2.13.x get_signing_key_from_jwt allocation of resources

A vulnerability was found in jpadilla PyJWT up to 2.13.x and classified as problematic. Affected by this issue is the function get_signing_key_from_jwt. Such manipulation leads to allocation of resources.

This vulnerability is referenced as CVE-2026-101917. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More