Skip to content

Update PyJWT to resolve CVE-2026-32597#266

Merged
cigamit merged 1 commit intomainfrom
CVE-2026-32597
Mar 16, 2026
Merged

Update PyJWT to resolve CVE-2026-32597#266
cigamit merged 1 commit intomainfrom
CVE-2026-32597

Conversation

@cigamit
Copy link
Copy Markdown
Contributor

@cigamit cigamit commented Mar 14, 2026

No description provided.

@cigamit cigamit requested a review from TheWitness March 14, 2026 06:04
@cigamit cigamit self-assigned this Mar 14, 2026
Copilot AI review requested due to automatic review settings March 14, 2026 06:04
@cigamit cigamit added dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically labels Mar 14, 2026
Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the pinned PyJWT dependency version in the compiled Python dependency lockfile to address CVE-2026-32597.

Changes:

  • Bump pyjwt[crypto] from 2.9.0 to 2.12.1 in requirements/requirements.txt.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

pygithub==2.8.1
# via -r /awx_devel/requirements/requirements.in
pyjwt[crypto]==2.9.0
pyjwt[crypto]==2.12.1
@cigamit cigamit merged commit 62171b2 into main Mar 16, 2026
4 checks passed
@cigamit cigamit deleted the CVE-2026-32597 branch March 16, 2026 15:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file SECURITY A security related issue like a CVE specifically

Development

Successfully merging this pull request may close these issues.

3 participants