J
Vendor security profile
jwt
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs1
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS9.1
12-month vulnerability rate
0
0
0
0
0
0
0
0
1
0
0
0
CVE KEV
CVE severity distribution
1toplam CVE
Critical1 (100%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
6.5
5.3
5.9
CVE-2026-102274PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
Patch verifiedEPSS %0
7.4
CVE-2026-102273PyJWT accepts public JWK containers as HMAC secrets
Patch verifiedEPSS %0
7.4
7.4
4.4
CVE-2026-102270PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
Patch verifiedEPSS %0