CVE-2026-103001 | jpadilla PyJWT up to 2.13.0 Options Merging PyJWT._merge_options verify_signature signature verification

September 30, 2026 Yanac

A vulnerability classified as critical has been found in jpadilla PyJWT up to 2.13.0. This affects the function PyJWT._merge_options of the component Options Merging. This manipulation of the argument verify_signature causes improper verification of cryptographic signature.

This vulnerability appears as CVE-2026-103001. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More