Page MenuHomeVyOS Platform
Create Task
Maniphest T8440

HTTP API accepts invalid JWT tokens
Closed, ResolvedPublic
Actions

Description

https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f

An issue in PyJWT makes validation incomplete and can lead to security issues.

Details

Version
-
Is it a breaking change?
Perfectly compatible
Issue type
Security vulnerability

Related Objects

Event Timeline

dmbaturin created this task.Mar 27 2026, 10:02 PM
dmbaturin closed this task as Resolved.
dmbaturin triaged this task as High priority.

Resolved via a Dependabot PR.

jestabro added a comment.Mar 28 2026, 1:27 AM

This is a duplicate of https://vyos.dev/T8407