{"action":"Upgrade pyjwt to 2.4.0 or later.","affected":[{"fixed":"2.4.0","introduced":"1.5.0"}],"component":"pyjwt","cve_ids":["CVE-2022-29217"],"ecosystem":"PyPI","epss":0.01355,"exploited":false,"fixed_versions":["2.4.0"],"ghsa_id":"GHSA-ffqj-6fqr-9h24","id":"tcs_01M5KFF73XYCQWQZHKY99PSDZ2","modified_at":"2024-10-15T16:27:42.751871Z","published_at":"2022-05-24T22:17:27Z","references":["https://osv.dev/vulnerability/GHSA-ffqj-6fqr-9h24","https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24","https://nvd.nist.gov/vuln/detail/CVE-2022-29217","https://github.com/jpadilla/pyjwt/commit/9c528670c455b8d948aff95ed50e22940d1ad3fc","https://github.com/jpadilla/pyjwt","https://github.com/jpadilla/pyjwt/releases/tag/2.4.0","https://github.com/pypa/advisory-database/tree/main/vulns/pyjwt/PYSEC-2022-202.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5PK7IQCBVNLYJEFTPHBBPFP72H4WUFNX","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6HIYEYZRQEP6QTHT3EHH3RGFYJIHIMAO"],"severity":{"label":"high","score":7.4},"sources":[{"source":"osv","source_id":"GHSA-ffqj-6fqr-9h24","url":"https://osv.dev/vulnerability/GHSA-ffqj-6fqr-9h24"}],"summary":"Key confusion through non-blocklisted public key formats"}