[Git][security-tracker-team/security-tracker][master] Add new batch of pyjwt issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
34c481bd by Salvatore Bonaccorso at 2026-09-29T11:02:33+02:00
Add new batch of pyjwt issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -89,27 +89,49 @@ CVE-2026-102277 (The brace-expansion library generates arbitrary strings contain
 CVE-2026-102276 (The brace-expansion library generates arbitrary strings containing a c ...)
 	TODO: check
 CVE-2026-102275 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
-	TODO: check
+	- pyjwt 2.15.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-x33g-cr3x-6449
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/3cd9ceec33ced359decbad75b413ad668ae6332c (2.15.0)
 CVE-2026-102274 (PyJWT is a Python implementation of JSON Web Token standards. From 2.9 ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w6j9-cwv2-h6wq
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/8915570a0bfda9f0ff0e34e7fb09bdb9d71580cf (2.14.0)
 CVE-2026-102273 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95 (2.14.0)
 CVE-2026-102272 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291 (2.14.0)
 CVE-2026-102271 (PyJWT is a Python implementation of JSON Web Token standards. From 2.4 ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-p4g4-x82p-q773
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/2798504fa2663364573cf2d1043d8d7fef389499 (2.14.0)
 CVE-2026-102270 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-jwrc-g2q2-pq5p
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07 (2.14.0)
 CVE-2026-102269 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-hxm8-2xgr-2p9m
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/e6f48401001609a8f99e71fcaf355fb895d508a8 (2.14.0)
 CVE-2026-102268 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07 (2.14.0)
 CVE-2026-102267 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56 (2.14.0)
 CVE-2026-102266 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9j54-fg26-wv3r
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/f91ed44dd65baaf457f4b3353ed35e98a753934c (2.14.0)
 CVE-2026-102265 (PyJWT is a Python implementation of JSON Web Token standards. From 2.1 ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-8wjv-2p76-3863
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/06573692ebcdec8831c3927513b3e87c31fbbb62 (2.14.0)
 CVE-2026-102264 (A vulnerability was found in mwasikz robo-cafe-rms up to 228c44a02823f ...)
 	TODO: check
 CVE-2026-102263 (A vulnerability has been found in mwasikz robo-cafe-rms up to 228c44a0 ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34c481bd276b6f05b70231896a3ad8197bd003f2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/34c481bd276b6f05b70231896a3ad8197bd003f2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/2c49df09/attachment-0001.htm>