jpadilla / pyjwt

JSON Web Token implementation in Python
https://pyjwt.readthedocs.io
MIT License
5.18k stars 690 forks source link

https://nvd.nist.gov/vuln/detail/CVE-2024-26130 update cryptography #946

Closed wmyre closed 6 months ago

wmyre commented 9 months ago

Summary. https://nvd.nist.gov/vuln/detail/CVE-2024-26130 published and has a high rating.

Expected Result

This library is updated to at least use version 42.0.4 of cryptography

jrabbit commented 9 months ago

Invalid >= doesn't stop you from having the latest patched version

github-actions[bot] commented 7 months ago

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days