Skip to content

PyJWT 1.7.1.post5

Choose a tag to compare

View all tags
@icanhasmath icanhasmath released this 22 Oct 17:23
· 273 commits to master since this release
1.7.1.post5
ab11afc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

ActiveState security release for the Python 2.7-compatible PyJWT 1.7.1 line.

CVE GHSA Level Status
CVE-2026-102268 GHSA-ffc3-869f-jxw9 Critical Fixed
CVE-2026-48526 GHSA-xgmm-8j9v-c9wx High Fixed
CVE-2026-102269 GHSA-hxm8-2xgr-2p9m Medium Fixed
CVE-2026-102270 GHSA-jwrc-g2q2-pq5p Medium Fixed
CVE-2026-101917 GHSA-2gx3-rcp4-g85q Medium Not affected (no PyJWKClient in 1.7.1)
CVE-2026-102267 GHSA-9v7f-9g4p-ffgj High Not affected (no PyJWKClient in 1.7.1)

Behaviour change: token segments must now be canonical unpadded Base64URL. Tokens with = padding, characters outside the alphabet, or set unused trailing bits raise DecodeError.

Versioning: this line now uses PEP 440 post-releases (1.7.1.postN) in place of the 1.7.1+security.N label.

See CHANGELOG.md and #5.

sha256 pyjwt-1.7.1.post5.tar.gz: b8dbd4dbf07fb9a509ac37e5583737c7052fe5374c2aa2472820bb340f92b7b0

Assets 3
Loading