< back to search

gpp_maybe Security update for python-jwcrypto

openSUSE-2026-129

This update for python-jwcrypto fixes the following issues: - CVE-2022-3102: jwcrypto token substitution can lead to authentication bypass (boo#1209496) - CVE-2023-6681: denial of service Via specifically crafted JWE (boo#1219837) - CVE-2024-28102: malicious JWE token can cause denial of service (boo#1221230) - CVE-2026-39373: Memory exhaustion via crafted compressed JWE tokens (boo#1261802)

Release Date

Apr 16 2026
References

Bugzilla: 1219837, 1209496, 1221230, 1261802
CVEs: CVE-2022-3102, CVE-2023-6681, CVE-2024-28102, CVE-2026-39373
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.7 x86_64

Packages

python3-jwcrypto
Python module package implementing JOSE Web standards

0.7-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 s390x

Packages

python3-jwcrypto
Python module package implementing JOSE Web standards

0.7-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 aarch64

Packages

python3-jwcrypto
Python module package implementing JOSE Web standards

0.7-bp157.2.3.1 lock rpm

SUSE Package Hub 15.7 ppc64le

Packages

python3-jwcrypto
Python module package implementing JOSE Web standards

0.7-bp157.2.3.1 lock rpm