Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
python-jose library may expose authentication data
published 3 months ago
Summary
The python-jose package used for handling JSON Web Tokens has a security weakness that could let an attacker read or alter authentication information. TuxCare has released a rebuilt version that fixes the issue. Update to version 3.3.0.post1+tuxcare as soon as possible to protect your applications.
What to do
- Update michael davis python-jose to version 3.3.0.post1+tuxcare.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:PyPI | michael davis | python-jose |
>= 3.3.0, < 3.3.0.post1+tuxcare Fix: upgrade to 3.3.0.post1+tuxcare
|
Original advisory text
TuxCare security update for python-jose (1 CVE)
TuxCare rebuilt python-jose to address 1 CVE. Fixed in 3.3.0.post1+tuxcare.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2025-1758845544 · OSV
Track software like this
Free during beta