Alerts This Week
Warning Icon 1 1,082
Alerts This Week
Warning Icon 1 1,082

Debian 11 PyJWT Critical Header Parameter Issue DLA-4564-1 CVE-2026-32597

debian lts
Calendar Grey May 5, 2026
Dist Debian Esm H88
Upgrade PyJWT in Debian due to critical RFC violation in header validation. Fix CVE-2026-32597 for security.
It was discovered that PyJWT, a Python implementation of JSON Web Token did not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11
Topics%20covered

Topics Covered

security advisory critical debian token validation pyjwt json web token

Summary

For Debian 11 bullseye, this problem has been fixed in version
1.7.1-2+deb11u1.

We recommend that you upgrade your pyjwt packages.

For the detailed security status of pyjwt please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pyjwt

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: pyjwt
Version: 1.7.1-2+deb11u1
CVE ID: CVE-2026-32597

Topics%20covered

Topics Covered

security advisory critical debian token validation pyjwt json web token

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here