{"schemaVersion":3,"id":"CVE-2022-29217","aliases":["MGASA-2022-0244","SUSE-SU-2022:2401-1","SUSE-SU-2022:2402-1","SUSE-SU-2022:2403-1","SUSE-SU-2022:3545-1","SUSE-SU-2023:0794-1","GHSA-ffqj-6fqr-9h24","PYSEC-2022-202","UBUNTU-CVE-2022-29217","USN-5526-1","DEBIAN-CVE-2022-29217","openSUSE-SU-2025:14987-1"],"status":"published","duplicateOf":null,"title":null,"description":"PyJWT is a Python implementation of RFC 7519. PyJWT supports multiple different JWT signing algorithms. With JWT, an attacker submitting the JWT token can choose the used signing algorithm. The PyJWT library requires that the application chooses what algorithms are supported. The application can specify `jwt.algorithms.get_default_algorithms()` to get support for all algorithms, or specify a single algorithm. The issue is not that big as `algorithms=jwt.algorithms.get_default_algorithms()` has to be used. Users should upgrade to v2.4.0 to receive a patch for this issue. As a workaround, always be explicit with the algorithms that are accepted and expected when decoding.","dates":{"published":"2022-05-24T14:10:10.000Z","modified":"2025-04-23T18:22:46.326Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":5.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.4,"severity":"high","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N","exploitability":5.6,"impact":8.7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01355,"percentile":0.71199,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.01355},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01355,"percentile":0.71199}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01355,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01355,"percentile":0.71199}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-327","name":"Use of a Broken or Risky Cryptographic Algorithm","description":"The product uses a broken or risky cryptographic algorithm or protocol.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/327.html"}],"affected":[{"vendor":"debian","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/pyjwt","purlType":"deb","versions":[{"text":"< 2.4.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/pyjwt","purlType":"deb","versions":[{"text":"< 1.5.3+ds1-1ubuntu0.1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.7.1-2ubuntu2.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.3.0-1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.3+ds1-1ubuntu0.1 | < 1.7.1-2ubuntu2.1 | < 2.3.0-1ubuntu0.1","eol":null,"hubHref":null},{"vendor":"fedoraproject","product":"fedora","name":"fedora","label":"fedora","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"35","noFixRecorded":false,"fixedIn":null},{"text":"36","noFixRecorded":false,"fixedIn":null}],"versionsText":"35 | 36","eol":{"isEol":true,"eolDate":"2022-12-13T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"35","label":"35","eolFrom":"2022-12-13T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"fedora","label":"Fedora Linux","category":"os"}},"hubHref":"/vendor/fedoraproject/fedora"},{"vendor":"jpadilla","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.5.0, < 2.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.5.0, < 2.4.0","eol":null,"hubHref":"/vendor/jpadilla/pyjwt"},{"vendor":"mageia","product":"python-pyjwt","name":"python-pyjwt","label":"python-pyjwt","ecosystem":"Mageia","cpePart":null,"purl":"pkg:rpm/mageia/python-pyjwt","purlType":"rpm","versions":[{"text":"< 2.4.0-1.mga8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-1.mga8","eol":null,"hubHref":null},{"vendor":"pyjwt_project","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 1.5.0, < 2.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 1.5.0, < 2.4.0","eol":null,"hubHref":"/vendor/pyjwt_project/pyjwt"},{"vendor":"PyPI","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/pyjwt","purlType":"pypi","versions":[{"text":"< 9c528670c455b8d948aff95ed50e22940d1ad3fc","noFixRecorded":false,"fixedIn":null},{"text":"≥ 1.5.0, < 2.4.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9c528670c455b8d948aff95ed50e22940d1ad3fc | ≥ 1.5.0, < 2.4.0","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-PyJWT&distro=openSUSE Leap 15.3","name":"python-PyJWT","label":"python-PyJWT&distro=openSUSE Leap 15.3","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-PyJWT&distro=openSUSE Leap 15.3","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-PyJWT&distro=openSUSE Leap 15.4","name":"python-PyJWT","label":"python-PyJWT&distro=openSUSE Leap 15.4","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-PyJWT&distro=openSUSE Leap 15.4","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1 | < 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"opensuse","product":"python-PyJWT&distro=openSUSE Tumbleweed","name":"python-PyJWT","label":"python-PyJWT&distro=openSUSE Tumbleweed","ecosystem":"openSUSE","cpePart":null,"purl":"pkg:rpm/opensuse/python-PyJWT&distro=openSUSE Tumbleweed","purlType":"rpm","versions":[{"text":"< 2.10.1-2.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.10.1-2.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Enterprise Storage 6","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Enterprise Storage 6","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Enterprise Storage 6","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Enterprise Storage 7","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Enterprise Storage 7","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Enterprise Storage 7","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1 | < 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Enterprise Storage 7.1","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Enterprise Storage 7.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Enterprise Storage 7.1","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1 | < 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1 | < 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Module for Package Hub 15 SP3","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 12","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 12","purlType":"rpm","versions":[{"text":"< 1.5.3-3.16.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.3-3.16.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15","purlType":"rpm","versions":[{"text":"< 1.5.3-150000.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.3-150000.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP1","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP1","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP2","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Module for Public Cloud 15 SP2","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Real Time 15 SP3","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Real Time 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Real Time 15 SP3","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP1-BCL","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP1-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP1-BCL","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP2-BCL","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP2-BCL","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP2-BCL","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1 | < 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server 15 SP3-LTSS","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1","purlType":"rpm","versions":[{"text":"< 1.7.1-150100.6.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150100.6.7.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1 | < 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP3","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Manager Proxy 4.1","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Manager Proxy 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Manager Proxy 4.1","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Manager Proxy 4.2","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Manager Proxy 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Manager Proxy 4.2","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Manager Retail Branch Server 4.1","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Manager Retail Branch Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Manager Retail Branch Server 4.1","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Manager Server 4.1","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Manager Server 4.1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Manager Server 4.1","purlType":"rpm","versions":[{"text":"< 1.7.1-150200.3.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.1-150200.3.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"python-PyJWT&distro=SUSE Manager Server 4.2","name":"python-PyJWT","label":"python-PyJWT&distro=SUSE Manager Server 4.2","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/python-PyJWT&distro=SUSE Manager Server 4.2","purlType":"rpm","versions":[{"text":"< 2.4.0-150200.3.6.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-150200.3.6.2","eol":null,"hubHref":null}],"affectedCount":40,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24","label":"github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24","hostname":"github.com","tags":["X Refsource CONFIRM","WEB","Advisory","REPORT","Issue Tracking","Third Party Advisory"]},{"url":"https://github.com/jpadilla/pyjwt/commit/9c528670c455b8d948aff95ed50e22940d1ad3fc","label":"github.com/jpadilla/pyjwt/commit/9c528670c455b8d948aff95ed50e22940d1ad3fc","hostname":"github.com","tags":["X Refsource MISC","WEB","FIX","REPORT","Patch","Third Party Advisory"]},{"url":"https://github.com/jpadilla/pyjwt/releases/tag/2.4.0","label":"github.com/jpadilla/pyjwt/releases/tag/2.4.0","hostname":"github.com","tags":["X Refsource MISC","WEB","REPORT","Release Notes","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6HIYEYZRQEP6QTHT3EHH3RGFYJIHIMAO/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5PK7IQCBVNLYJEFTPHBBPFP72H4WUFNX/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"https://www.vicarius.io/vsociety/posts/risky-algorithms-algorithm-confusion-in-pyjwt-cve-2022-29217","label":"www.vicarius.io/vsociety/posts/risky-algorithms-algorithm-confusion-in-pyjwt-cve-2022-29217","hostname":"www.vicarius.io","tags":[]},{"url":"https://advisories.mageia.org/MGASA-2022-0244.html","label":"advisories.mageia.org/MGASA-2022-0244.html","hostname":"advisories.mageia.org","tags":["Advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30485","label":"bugs.mageia.org/show_bug.cgi?id=30485","hostname":"bugs.mageia.org","tags":["REPORT"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/6HIYEYZRQEP6QTHT3EHH3RGFYJIHIMAO/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222401-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222401-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1199756","label":"bugzilla.suse.com/1199756","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2022-29217","label":"www.suse.com/security/cve/CVE-2022-29217","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222402-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222402-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222403-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20222403-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223545-1/","label":"www.suse.com/support/update/announcement/2022/suse-su-20223545-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230794-1/","label":"www.suse.com/support/update/announcement/2023/suse-su-20230794-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1176785","label":"bugzilla.suse.com/1176785","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1199282","label":"bugzilla.suse.com/1199282","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29217","label":"nvd.nist.gov/vuln/detail/CVE-2022-29217","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/jpadilla/pyjwt","label":"github.com/jpadilla/pyjwt","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2022-202.yaml","label":"github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2022-202.yaml","hostname":"github.com","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5PK7IQCBVNLYJEFTPHBBPFP72H4WUFNX","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HIYEYZRQEP6QTHT3EHH3RGFYJIHIMAO","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HIYEYZRQEP6QTHT3EHH3RGFYJIHIMAO/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5PK7IQCBVNLYJEFTPHBBPFP72H4WUFNX/","label":"lists.fedoraproject.org/archives/…","hostname":"lists.fedoraproject.org","tags":["WEB"]},{"url":"https://ubuntu.com/security/CVE-2022-29217","label":"ubuntu.com/security/CVE-2022-29217","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/notices/USN-5526-1","label":"ubuntu.com/security/notices/USN-5526-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5526-2","label":"ubuntu.com/security/notices/USN-5526-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29217","label":"www.cve.org/CVERecord?id=CVE-2022-29217","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-29217","label":"security-tracker.debian.org/tracker/CVE-2022-29217","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ULS2CQWOTPM7SN6Z2YWKR4U2M2XSNHRY/","label":"lists.opensuse.org/archives/…","hostname":"lists.opensuse.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["USN-5526-2"]},"timeline":[{"kind":"published","date":"2022-05-24T14:10:10.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2025-04-23T18:22:46.326Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T03:39:13.621Z","stale":false,"partial":false}}