It was discovered that PyJWT, a Python implementation of JSON web tokens
insufficiently validated the "crit" header parameter, which could result
in incomplete enforcement of authentication settings.
Intelligence View
⚡ tsecurity.de Intelligence
DSA-6259-1 pyjwt - security update
It was discovered that PyJWT, a Python implementation of JSON web tokens insufficiently validated the "crit" header parameter, which could result in incomplete…