Skip to content
Vulnerability intelligence

CVE-2026-102265 — Security Advisory

The bug hits apps that read tokens from a request body. PyJWT 2.14.0 contains the fix.

2026
What WebPulse reported · 1 analysis
PyJWT flaw lets one crafted token turn logins into server errors

The bug hits apps that read tokens from a request body. PyJWT 2.14.0 contains the fix.

September 30, 2026
View CVE-2026-102265 on the NIST National Vulnerability Database →
Related vulnerabilities
CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795