CVE-2026-102269

Name of the Vulnerable Software and Affected Versions PyJWT versions prior to 2.14.0

Description PyJWT is a Python implementation of JSON Web Token standards. The signature segment decoding process accepts characters outside the canonical Base64URL representation when non-Base64URL characters are appended to a valid compact JWS signature segment. This causes the base64url decode function to produce identical signature bytes for different serialized segments, which can lead to failures in raw-token revocation checks when attempting to recognize an equivalent modified token.

Recommendations Update PyJWT to version 2.14.0.