VDB
CVE-2026-102273
CVE-2026-102273
PUBLISHED
CVSS 7.400000095367432 HIGH
PyJWT accepts public JWK containers as HMAC secrets
EPSS 0.18% · 6.9th percentile
Risk Scores
CVSS 3.1
7.400000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.18%
6.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | kserve-huggingfaceserver-cuda-13.3 | 0 |
| chainguard | authentik-fips-2026.5 | 0 |
| chainguard | kserve | 0 |
| wolfi | py3-cassandra-medusa | 0 |
| chainguard | openstack-nova-2025.1 | 0 |
| chainguard | datadog-agent-7.79 | 0 |
| chainguard | openstack-placement-2026.1-fips | 0 |
| chainguard | openstack-designate-2026.1 | 0 |
| chainguard | openstack-placement-2025.1 | 0 |
| chainguard | netbox-fips | 0 |
| chainguard | openstack-keystone-2025.2 | 0 |
| chainguard | azureml-inference-server-http | 0 |
| chainguard | datadog-agent-fips-7.83 | 0 |
| chainguard | superset-fips-6.1 | 0 |
| chainguard | openstack-keystone-2025.2-fips | 0 |
| chainguard | litellm | 0 |
| jpadilla | pyjwt | 2.13.0 |
| chainguard | openstack-horizon-2025.2-fips | 0 |
| chainguard | openstack-designate-2025.2 | 0 |
| chainguard | openstack-octavia-2025.2 | 0 |
…and 62 more
Timeline
- Sep 28, 2026 CVE Published
- Sep 29, 2026 CVE Updated
- Sep 29, 2026 EPSS Score
- Oct 6, 2026 EPSS Score
- Oct 13, 2026 EPSS Score
- Oct 19, 2026 EPSS Score
- Oct 25, 2026 EPSS Score
- Oct 30, 2026 Security Advisory
References
- https://nvd.nist.gov/vuln/detail/CVE-2026-102273 advisory
- https://github.com/advisories/GHSA-w2cx-738m-mc7w advisory
- https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w url
- https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95 patch
- https://github.com/jpadilla/pyjwt/releases/tag/2.14.0 url