You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
[Deepin Integration]~[v25-Release] feat: update pyjwt to 2.10.1-2+deb13u1 by deepin-community-bot[bot]@deepin-community/pyjwt by deepin-community-ci-bot[bot] #13254
Fix CVE-2026-32597: PyJWT did not validate the crit (Critical) Header
Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit
array listing extensions that PyJWT does not understand, the library
accepts the token instead of rejecting it. This violates the MUST
requirement in the RFC. (Closes: #1130662)
Package information | 软件包信息
Package repository address | 软件包仓库地址
Changelog | 更新信息
pyjwt (2.10.1-2+deb13u1) trixie-security; urgency=medium
Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit
array listing extensions that PyJWT does not understand, the library
accepts the token instead of rejecting it. This violates the MUST
requirement in the RFC. (Closes: #1130662)