Skip to content

pyjwt needs to be updated to version 2.12.0 or higher #573

@oomichi-melco

Description

@oomichi-melco

PyJWT==2.10.0 is specified in the requirements.txt.
However prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter, since CVE-2026-32597.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions