[Git][security-tracker-team/security-tracker][master] Add two more pyjwt issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ae306304 by Salvatore Bonaccorso at 2026-09-29T11:33:20+02:00
Add two more pyjwt issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -161,9 +161,13 @@ CVE-2026-102005 (Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs
 CVE-2026-102004 (Wind River VxWorks 7 prior to 26.09, specific system call arguments ca ...)
 	NOT-FOR-US: WindRiver
 CVE-2026-101918 (PyJWT is a Python implementation of JSON Web Token standards. From 2.0 ...)
-	TODO: check
+	- pyjwt 2.15.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-42vr-xj54-vc7v
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/5fde08a6cf906aa7698de2d6391d88b73006b17b (2.15.0)
 CVE-2026-101917 (PyJWT is a Python implementation of JSON Web Token standards. Prior to ...)
-	TODO: check
+	- pyjwt 2.14.0-1
+	NOTE: https://github.com/jpadilla/pyjwt/security/advisories/GHSA-2gx3-rcp4-g85q
+	NOTE: Fixed by: https://github.com/jpadilla/pyjwt/commit/ba4853a75fb9676362da17f67d0f64bd18afd4e1 (2.14.0)
 CVE-2026-101916 (@grpc/grpc-js implements the core functionality of gRPC purely in Java ...)
 	TODO: check
 CVE-2026-101915 (@grpc/grpc-js implements the core functionality of gRPC purely in Java ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3063042b97ff2a843f8e3c3da2a9353fdc9277

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ae3063042b97ff2a843f8e3c3da2a9353fdc9277
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260929/7ef20590/attachment.htm>