{"schemaVersion":3,"id":"CVE-2026-102275","aliases":["GHSA-x33g-cr3x-6449","PYSEC-2026-4183","UBUNTU-CVE-2026-102275","DEBIAN-CVE-2026-102275","CGA-2c58-5mfg-9vhx","CGA-2hrv-x49x-xpmr","CGA-4m82-6c2j-m43c","CGA-7fmr-vc7p-h4xr","CGA-97g8-pvqv-wqx5","CGA-cp3h-2c74-664h","CGA-rmh5-pwv9-8qpw","CGA-whp6-rj54-pwg6","CGA-23pf-f752-r9m3","CGA-2j4g-vrmq-6q6c","CGA-2pfc-r4h7-7f2m","CGA-2q9g-4vw7-46qj","CGA-2r6p-qc98-6c6v","CGA-2wmc-w69r-6qj9","CGA-2wpr-r6pf-cpp7","CGA-368g-xh2w-gp4f","CGA-389p-mmr5-x5pm","CGA-43hh-fwxv-vxgh","CGA-46r3-hcwg-6fq4","CGA-4cr5-qw24-5hgq","CGA-4pcf-pg53-r34c","CGA-53qv-w7m3-x45j","CGA-53v4-pfj5-fqrg","CGA-5q5v-6549-wpj6","CGA-5x69-qvq3-7jwc","CGA-5xpp-q48p-jr72","CGA-6gvg-788j-7xqv","CGA-6jj4-c4hf-m4w2","CGA-739q-f92m-rp69","CGA-74m3-r5j8-233h","CGA-82v4-w2r6-78fc","CGA-8hvg-2qrm-ppv5","CGA-8q6g-hfp6-6p8w","CGA-9jm4-2w2q-hmpj","CGA-9r36-vj72-cq7m","CGA-c2mx-q5q6-8ffc","CGA-c3f9-9grj-4485","CGA-c58w-mg9r-c8p5","CGA-c5qv-mv7g-qmcr","CGA-c727-2qp9-mmxm","CGA-cqq6-43rw-gqgj","CGA-cw3r-g76j-pj8x","CGA-f85m-v5px-3vwp","CGA-fh33-wm32-rxf3","CGA-fj3h-f293-6rjm","CGA-fw7c-8h62-jxmw","CGA-g2c5-grfq-4xh7","CGA-g6j9-vq48-f7gv","CGA-gv9p-336p-5hrh","CGA-gvq7-gq2g-ppjp","CGA-gx2m-98x5-w2j4","CGA-h23f-7779-xfj9","CGA-h9w5-w8vr-3p78","CGA-hf9g-cgxq-f7g5","CGA-hgfc-rm9q-mf2q","CGA-hqmc-xxq6-7rr3","CGA-jqrj-3fqr-jv95","CGA-jqx2-75f3-rg5g","CGA-jx7h-6rpq-696h","CGA-mc7w-x69r-fm3w","CGA-mf97-vf2p-84jc","CGA-mrmf-gjr8-388x","CGA-pc4x-97hr-rp9r","CGA-pg99-m4c7-7wv3","CGA-pvgx-vjgp-ffm6","CGA-xf58-qgh7-3gxw","CGA-q3hp-3xj9-xj7q","CGA-qqpp-fh7h-vfq9","CGA-qw23-884j-wj74","CGA-qxrf-fwj3-53wx","CGA-r77w-jv4v-5qgv","CGA-r96r-cv88-rp5r","CGA-rjq4-q2pg-372w","CGA-rqw6-68x4-rgx7","CGA-rvwh-5vw7-mw8p","CGA-v26f-g8c2-p22r","CGA-v2fg-pr7x-8g7c","CGA-vrmw-27w2-46j7","CGA-w9x7-83cg-6946","CGA-wfvf-wcx3-794f","CGA-x742-36hr-3qqv","CGA-x944-7c46-5977"],"status":"published","duplicateOf":null,"title":null,"description":"PyJWT is a Python implementation of JSON Web Token standards. From 2.1.0 until 2.15.0, PyJWT OKPAlgorithm.from_jwk in  jwt/algorithms.py is affected because private-JWK import path does not compare the public key derived from d with x. This occurs when an OKP private JWK supplies non-corresponding x and d components. As a result, identity derived from x can differ from operations performed with d. Consequently, if an integration also accepts private key parameters from a proof header without rejecting them, an attacker may use a stolen sender-constrained token without the legitimate private key. This issue is fixed in version 2.15.0.","dates":{"published":"2026-09-28T20:46:33.169Z","modified":"2026-09-29T13:56:09.869Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.2,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Pypi","score":8.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","exploitability":10,"impact":7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":8.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","exploitability":10,"impact":7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":8.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","exploitability":10,"impact":7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","exploitability":5.6,"impact":7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N","exploitability":5.6,"impact":7,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.2,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00143,"percentile":0.03222,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-09-29T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00143,"percentile":0.03222}],"last30":[{"date":"2026-09-29T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00137,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00143,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00143,"percentile":0.03222}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_JPADILLA_PYJWT","name":"Pyjwt","source":"github","url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-75c5-xw7c-p5pm","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-345","name":"Insufficient Verification of Data Authenticity","description":"The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/345.html"},{"id":"CWE-348","name":"Use of Less Trusted Source","description":"The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/348.html"}],"affected":[{"vendor":"chainguard","product":"airflow-2","name":"airflow-2","label":"airflow-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airflow-core-2","name":"airflow-core-2","label":"airflow-core-2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airflow-core-2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"awx","name":"awx","label":"awx","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/awx","purlType":"apk","versions":[{"text":"< 24.6.1-r67","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 24.6.1-r67","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.77-core-integrations","name":"datadog-agent-7.77-core-integrations","label":"datadog-agent-7.77-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.78-core-integrations","name":"datadog-agent-7.78-core-integrations","label":"datadog-agent-7.78-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.78-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.80-core-integrations","name":"datadog-agent-7.80-core-integrations","label":"datadog-agent-7.80-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.80-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.81-core-integrations","name":"datadog-agent-7.81-core-integrations","label":"datadog-agent-7.81-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.81-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.82-core-integrations","name":"datadog-agent-7.82-core-integrations","label":"datadog-agent-7.82-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.82-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.83-core-integrations","name":"datadog-agent-7.83-core-integrations","label":"datadog-agent-7.83-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.83-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-7.84-core-integrations","name":"datadog-agent-7.84-core-integrations","label":"datadog-agent-7.84-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-7.84-core-integrations","purlType":"apk","versions":[{"text":"< 7.84.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.84.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.77-core-integrations","name":"datadog-agent-fips-7.77-core-integrations","label":"datadog-agent-fips-7.77-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.78-core-integrations","name":"datadog-agent-fips-7.78-core-integrations","label":"datadog-agent-fips-7.78-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.78-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.79-core-integrations","name":"datadog-agent-fips-7.79-core-integrations","label":"datadog-agent-fips-7.79-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.79-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.80-core-integrations","name":"datadog-agent-fips-7.80-core-integrations","label":"datadog-agent-fips-7.80-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.80-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.81-core-integrations","name":"datadog-agent-fips-7.81-core-integrations","label":"datadog-agent-fips-7.81-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.81-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.82-core-integrations","name":"datadog-agent-fips-7.82-core-integrations","label":"datadog-agent-fips-7.82-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.82-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.83-core-integrations","name":"datadog-agent-fips-7.83-core-integrations","label":"datadog-agent-fips-7.83-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.83-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datadog-agent-fips-7.84-core-integrations","name":"datadog-agent-fips-7.84-core-integrations","label":"datadog-agent-fips-7.84-core-integrations","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datadog-agent-fips-7.84-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 7.84.2-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 7.84.2-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"datahub-ingestion-fips","name":"datahub-ingestion-fips","label":"datahub-ingestion-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/datahub-ingestion-fips","purlType":"apk","versions":[{"text":"< 1.7.0.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.0.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kserve-huggingfaceserver-cuda-13.3","name":"kserve-huggingfaceserver-cuda-13.3","label":"kserve-huggingfaceserver-cuda-13.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kserve-huggingfaceserver-cuda-13.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.21.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.21.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lmcache-cuda-13.0","name":"lmcache-cuda-13.0","label":"lmcache-cuda-13.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lmcache-cuda-13.0","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 0.5.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 0.5.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2025.1-fips","name":"openstack-glance-2025.1-fips","label":"openstack-glance-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2025.1-fips","purlType":"apk","versions":[{"text":"< 30.2.0_git20260928-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 30.2.0_git20260928-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-glance-2025.2-fips","name":"openstack-glance-2025.2-fips","label":"openstack-glance-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-glance-2025.2-fips","purlType":"apk","versions":[{"text":"< 31.1.0_git20260925-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 31.1.0_git20260925-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.1","name":"openstack-horizon-2025.1","label":"openstack-horizon-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.1","purlType":"apk","versions":[{"text":"< 25.3.2_git20260617-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.3.2_git20260617-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.1-fips","name":"openstack-horizon-2025.1-fips","label":"openstack-horizon-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.1-fips","purlType":"apk","versions":[{"text":"< 25.3.2_git20260617-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.3.2_git20260617-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.2","name":"openstack-horizon-2025.2","label":"openstack-horizon-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.2","purlType":"apk","versions":[{"text":"< 25.5.2_git20260914-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.5.2_git20260914-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2025.2-fips","name":"openstack-horizon-2025.2-fips","label":"openstack-horizon-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2025.2-fips","purlType":"apk","versions":[{"text":"< 25.5.2_git20260914-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.5.2_git20260914-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2026.1","name":"openstack-horizon-2026.1","label":"openstack-horizon-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2026.1","purlType":"apk","versions":[{"text":"< 25.7.3_git20260924-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.7.3_git20260924-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-horizon-2026.1-fips","name":"openstack-horizon-2026.1-fips","label":"openstack-horizon-2026.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-horizon-2026.1-fips","purlType":"apk","versions":[{"text":"< 25.7.3_git20261001-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.7.3_git20261001-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-nova-2025.1","name":"openstack-nova-2025.1","label":"openstack-nova-2025.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-nova-2025.1","purlType":"apk","versions":[{"text":"< 31.3.0_git20260717-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 31.3.0_git20260717-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-nova-2025.2","name":"openstack-nova-2025.2","label":"openstack-nova-2025.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-nova-2025.2","purlType":"apk","versions":[{"text":"< 32.2.0_git20260715-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 32.2.0_git20260715-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2025.1-fips","name":"openstack-placement-2025.1-fips","label":"openstack-placement-2025.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2025.1-fips","purlType":"apk","versions":[{"text":"< 13.0.0_git20260916-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.0.0_git20260916-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2025.2-fips","name":"openstack-placement-2025.2-fips","label":"openstack-placement-2025.2-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2025.2-fips","purlType":"apk","versions":[{"text":"< 14.0.0_git20260916-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.0.0_git20260916-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"openstack-placement-2026.1-fips","name":"openstack-placement-2026.1-fips","label":"openstack-placement-2026.1-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/openstack-placement-2026.1-fips","purlType":"apk","versions":[{"text":"< 15.0.0_git20260812-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 15.0.0_git20260812-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-airflow-3","name":"py3.12-airflow-3","label":"py3.12-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.12-airflow-postgres-fips-3","name":"py3.12-airflow-postgres-fips-3","label":"py3.12-airflow-postgres-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.12-airflow-postgres-fips-3","purlType":"apk","versions":[{"text":"< 3.3.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-airflow-3","name":"py3.13-airflow-3","label":"py3.13-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.13-airflow-postgres-fips-3","name":"py3.13-airflow-postgres-fips-3","label":"py3.13-airflow-postgres-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.13-airflow-postgres-fips-3","purlType":"apk","versions":[{"text":"< 3.3.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.14-airflow-3","name":"py3.14-airflow-3","label":"py3.14-airflow-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.14-airflow-3","purlType":"apk","versions":[{"text":"< 3.3.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"py3.14-airflow-postgres-fips-3","name":"py3.14-airflow-postgres-fips-3","label":"py3.14-airflow-postgres-fips-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/py3.14-airflow-postgres-fips-3","purlType":"apk","versions":[{"text":"< 3.3.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-manager-framework","name":"wazuh-manager-framework","label":"wazuh-manager-framework","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-manager-framework","purlType":"apk","versions":[{"text":"< 4.14.8-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-manager-framework-fips","name":"wazuh-manager-framework-fips","label":"wazuh-manager-framework-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-manager-framework-fips","purlType":"apk","versions":[{"text":"< 4.14.8-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.8-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.77-core-integrations","name":"datadog-agent-7.77-core-integrations","label":"datadog-agent-7.77-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.77-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.78-core-integrations","name":"datadog-agent-7.78-core-integrations","label":"datadog-agent-7.78-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.78-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.80-core-integrations","name":"datadog-agent-7.80-core-integrations","label":"datadog-agent-7.80-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.80-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"datadog-agent-7.81-core-integrations","name":"datadog-agent-7.81-core-integrations","label":"datadog-agent-7.81-core-integrations","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/datadog-agent-7.81-core-integrations","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"debian","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/pyjwt","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.15.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.15.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/pyjwt","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"jpadilla","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.1.0, < 2.15.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.1.0, < 2.15.0","eol":null,"hubHref":"/vendor/jpadilla/pyjwt"},{"vendor":"pyjwt_project","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 2.1.0, < 2.15.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.1.0, < 2.15.0","eol":null,"hubHref":"/vendor/pyjwt_project/pyjwt"},{"vendor":"PyPI","product":"pyjwt","name":"pyjwt","label":"pyjwt","ecosystem":"PyPI","cpePart":null,"purl":"pkg:pypi/pyjwt","purlType":"pypi","versions":[{"text":"≥ 2.1.0, < 2.15.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 2.1.0, < 2.15.0","eol":null,"hubHref":null}],"affectedCount":51,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-x33g-cr3x-6449","label":"github.com/jpadilla/pyjwt/security/advisories/GHSA-x33g-cr3x-6449","hostname":"github.com","tags":["X Refsource CONFIRM","WEB","EVIDENCE","REPORT","Advisory","Exploit","Vendor Advisory"]},{"url":"https://github.com/jpadilla/pyjwt/commit/3cd9ceec33ced359decbad75b413ad668ae6332c","label":"github.com/jpadilla/pyjwt/commit/3cd9ceec33ced359decbad75b413ad668ae6332c","hostname":"github.com","tags":["X Refsource MISC","WEB","FIX","REPORT","Patch"]},{"url":"https://github.com/jpadilla/pyjwt/releases/tag/2.15.0","label":"github.com/jpadilla/pyjwt/releases/tag/2.15.0","hostname":"github.com","tags":["X Refsource MISC","WEB","Advisory","REPORT","Product","Release Notes"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102275","label":"nvd.nist.gov/vuln/detail/CVE-2026-102275","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://github.com/jpadilla/pyjwt","label":"github.com/jpadilla/pyjwt","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://ubuntu.com/security/CVE-2026-102275","label":"ubuntu.com/security/CVE-2026-102275","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102275","label":"www.cve.org/CVERecord?id=CVE-2026-102275","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-102275","label":"security-tracker.debian.org/tracker/CVE-2026-102275","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102275.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/102xxx/CVE-2026-102275.json","hostname":"github.com","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:11994-1","OPENSUSE-SU-2026:22074-1","SUSE-SU-2026:24126-1","SUSE-SU-2026:24134-1"],"duplicates":[],"related":["OPENSUSE-SU-2026:11994-1","OPENSUSE-SU-2026:22074-1","SUSE-SU-2026:24126-1","SUSE-SU-2026:24134-1"]},"timeline":[{"kind":"published","date":"2026-09-28T20:46:33.169Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-29T13:56:09.869Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":43,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:29:20.107Z","stale":false,"partial":false}}