Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-45768

Опубликовано: 31 июл. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7

Описание

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

РелизСтатусПримечание
devel

deferred

2025-10-01
esm-infra/bionic

deferred

2025-10-01
esm-infra/focal

deferred

2025-10-01
esm-infra/xenial

deferred

2025-10-01
jammy

deferred

2025-10-01
noble

deferred

2025-10-01
plucky

deferred

2025-10-01
questing

deferred

2025-10-01
upstream

needs-triage

Показывать по

EPSS

Процентиль: 2%
0.00015
Низкий

7 High

CVSS3

Связанные уязвимости

CVSS3: 5.6
redhat
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

CVSS3: 7
nvd
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

msrc
2 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library (admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement).

CVSS3: 7
debian
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is ...

CVSS3: 7
github
3 месяца назад

pyjwt v2.10.1 was discovered to contain weak encryption.

EPSS

Процентиль: 2%
0.00015
Низкий

7 High

CVSS3