Repository navigation
Require PyJWT 2.15.0 or later, which fixes CVE-2026-101918 (GHSA-42vr-xj54-vc7v). pyixapi decodes tokens without a signature check, which is the path that this vulnerability affects.
Also require requests 2.33.0 or later, which fixes CVE-2026-25645. pyixapi now accepts all PyJWT 2.x versions.