critical
CVE-2026-102266
pyjwt: pyjwt: Authentication bypass via empty HMAC key acceptance
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
GHSA7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Red Hat7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by GHSA (high), Red Hat (high), Amazon (high), Azure Linux (high), Ubuntu (medium).
Description
PyJWT is a Python implementation of JSON Web Token standards. From 2.13.0 until 2.14.0, HMACAlgorithm.from_jwk is affected because PyJWK verification path used the decoded key without applying prepare_key validation. This occurs when a trusted JWK Set contains an oct entry with an empty k value. As a result, an attacker signs an HMAC token with the same zero-length key accepted by PyJWT. Consequently, forged token can carry arbitrary authenticated claims. This issue is fixed in version 2.14.0.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 5.0 | python3-PyJWT | 2.15.1-1.ph5 |
| amazon linux 2023 | python3-jwt, python3-jwt+crypto | 2.4.0-1.amzn2023.0.6 |
| Azure Linux 3.0 | python-jwt | 0:2.15.1-1.azl3 |
| chainguard | airflow-core-3, airflow-postgres-fips-3, authentik-2026.5 and 66 more | 3.3.2-r2 and 67 more |
| debian 11 | pyjwt | no fix listed |
| debian 13 | pyjwt | no fix listed |
| debian 14 | pyjwt | 2.14.0-1 |
| echo | pyjwt | 2.15.1-1 |
| echo pip::Echo OSV | pyjwt | 2.14.0 |
| minimos | airflow-3, az, jupyterhub-k8s-hub and 6 more | 3.3.2-r0 and 6 more |
| pip::GitHub Security Advisory pip | pyjwt | 2.14.0 |
| rapidfort alma 10 | fence-agents-aliyun, fence-agents-all, fence-agents-amt-ws and 52 more | no fix listed |
Show all 592 entries from 30 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 5.0 | python3-PyJWT | 2.15.1-1.ph5 |
| amazon linux 2023 | python3-jwt | 2.4.0-1.amzn2023.0.6 |
| amazon linux 2023 | python3-jwt+crypto | 2.4.0-1.amzn2023.0.6 |
| Azure Linux 3.0 | python-jwt | 0:2.15.1-1.azl3 |
| chainguard | airflow-core-3 | 3.3.2-r2 |
| chainguard | airflow-postgres-fips-3 | 3.3.2-r1 |
| chainguard | authentik-2026.5 | 2026.5.7-r4 |
| chainguard | authentik-fips-2026.5 | 2026.5.7-r7 |
| chainguard | azureml-inference-server-http | 1.5.1-r10 |
| chainguard | azureml-inference-server-http-fips | 1.5.1-r9 |
| chainguard | datadog-agent-7.77 | 7.77.3-r26 |
| chainguard | datadog-agent-7.79 | 7.79.2-r20 |
| chainguard | datadog-agent-7.80 | 7.80.4-r19 |
| chainguard | datadog-agent-7.81 | 7.81.3-r8 |
| chainguard | datadog-agent-7.82 | 7.82.3-r5 |
| chainguard | datadog-agent-7.83 | 7.83.3-r2 |
| chainguard | datadog-agent-7.84 | 7.84.1-r1 |
| chainguard | datadog-agent-fips-7.77 | 7.77.3-r38 |
| chainguard | datadog-agent-fips-7.79 | 7.79.2-r18 |
| chainguard | datadog-agent-fips-7.80 | 7.80.4-r21 |
| chainguard | datadog-agent-fips-7.81 | 7.81.3-r12 |
| chainguard | datadog-agent-fips-7.82 | 7.82.3-r8 |
| chainguard | datadog-agent-fips-7.83 | 7.83.3-r3 |
| chainguard | datadog-agent-fips-7.84 | 7.84.2-r3 |
| chainguard | datahub-ingestion | 1.7.0.1-r2 |
| chainguard | datahub-ingestion-fips | 1.7.0.1-r1 |
| chainguard | ggshield | 1.55.0-r1 |
| chainguard | kserve | 0.21.0-r1 |
| chainguard | kserve-huggingfaceserver-cuda-13.3 | 0.21.0-r4 |
| chainguard | litellm | 1.103.1-r1 |
| chainguard | mcp-atlassian | 0.23.1-r2 |
| chainguard | metaflow-service-fips | 2.6.1-r1 |
| chainguard | nemo-rl-cuda-13.0 | 0.7.0-r2 |
| chainguard | netbox-fips | 4.7.2-r1 |
| chainguard | open-webui | 0.11.4-r1 |
| chainguard | openstack-cinder-2026.1 | 28.0.0_git20260904-r4 |
| chainguard | openstack-designate-2025.2 | 21.0.1_git20260817-r2 |
| chainguard | openstack-designate-2026.1 | 22.0.1_git20260827-r2 |
| chainguard | openstack-glance-2025.1 | 30.2.0_git20260912-r2 |
| chainguard | openstack-glance-2025.1-fips | 30.2.0_git20260928-r1 |
| chainguard | openstack-glance-2025.2-fips | 31.1.0_git20260925-r1 |
| chainguard | openstack-glance-2026.1-fips | 32.0.0_git20260930-r1 |
| chainguard | openstack-heat-2025.2 | 25.0.1_git20260905-r1 |
| chainguard | openstack-heat-2026.1 | 26.0.1_git20260905-r1 |
| chainguard | openstack-horizon-2025.1 | 25.3.2_git20260617-r13 |
| chainguard | openstack-horizon-2025.1-fips | 25.3.2_git20260617-r12 |
| chainguard | openstack-horizon-2025.2 | 25.5.2_git20260914-r3 |
| chainguard | openstack-horizon-2025.2-fips | 25.5.2_git20260914-r2 |
| chainguard | openstack-horizon-2026.1 | 25.7.3_git20260924-r3 |
| chainguard | openstack-horizon-2026.1-fips | 25.7.3_git20260924-r2 |
| chainguard | openstack-keystone-2025.1-fips | 27.0.1_git20260910-r4 |
| chainguard | openstack-keystone-2025.2 | 28.0.1_git20260902-r5 |
| chainguard | openstack-keystone-2025.2-fips | 28.0.1_git20260902-r4 |
| chainguard | openstack-keystone-2026.1 | 29.0.1_git20260904-r8 |
| chainguard | openstack-manila-2025.2 | 21.0.2_git20260923-r1 |
| chainguard | openstack-manila-2026.1 | 22.0.1_git20260905-r1 |
| chainguard | openstack-neutron-2026.1 | 28.0.2_git20260928-r3 |
| chainguard | openstack-nova-2025.1 | 31.3.0_git20260717-r13 |
| chainguard | openstack-nova-2025.2 | 32.2.0_git20260715-r14 |
| chainguard | openstack-nova-2026.1 | 33.0.1_git20260819-r12 |
| chainguard | openstack-octavia-2025.2 | 17.0.1_git20260904-r1 |
| chainguard | openstack-octavia-2026.1 | 18.0.1_git20260904-r1 |
| chainguard | openstack-placement-2025.1 | 13.0.0_git20260916-r4 |
| chainguard | openstack-placement-2025.1-fips | 13.0.0_git20260916-r4 |
| chainguard | openstack-placement-2025.2 | 14.0.0_git20260916-r5 |
| chainguard | openstack-placement-2025.2-fips | 14.0.0_git20260916-r4 |
| chainguard | openstack-placement-2026.1 | 15.0.0_git20260806-r11 |
| chainguard | openstack-placement-2026.1-fips | 15.0.0_git20260812-r9 |
| chainguard | py3-cassandra-medusa | 0.30.1-r1 |
| chainguard | semgrep | 1.178.0-r6 |
| chainguard | superset-5.0 | 5.0.0-r36 |
| chainguard | superset-6.1 | 6.1.0-r10 |
| chainguard | superset-fips-6.1 | 6.1.0-r7 |
| debian 11 | pyjwt | no fix listed |
| debian 13 | pyjwt | no fix listed |
| debian 14 | pyjwt | 2.14.0-1 |
| echo | pyjwt | 2.15.1-1 |
| echo pip::Echo OSV | pyjwt | 2.14.0 |
| minimos | airflow-3 | 3.3.2-r0 |
| minimos | az | 2.91.0-r0 |
| minimos | jupyterhub-k8s-hub | 4.4.3-r0 |
| minimos | miniconda3 | 26.9.3.0.314-r0 |
| minimos | py3-jwt | 2.14.0-r0 |
| minimos | py3-pyjwt | 2.14.0-r0 |
| minimos | semgrep | 1.179.0-r0 |
| minimos | vllm-cu129 | 0.30.0-r0 |
| minimos | vllm-cu130 | 0.30.0-r0 |
| pip::GitHub Security Advisory pip | pyjwt | 2.14.0 |
| rapidfort alma 10 | fence-agents-aliyun | no fix listed |
| rapidfort alma 10 | fence-agents-all | no fix listed |
| rapidfort alma 10 | fence-agents-amt-ws | no fix listed |
| rapidfort alma 10 | fence-agents-apc | no fix listed |
| rapidfort alma 10 | fence-agents-apc-snmp | no fix listed |
| rapidfort alma 10 | fence-agents-aws | no fix listed |
| rapidfort alma 10 | fence-agents-azure-arm | no fix listed |
| rapidfort alma 10 | fence-agents-bladecenter | no fix listed |
| rapidfort alma 10 | fence-agents-brocade | no fix listed |
| rapidfort alma 10 | fence-agents-cisco-mds | no fix listed |
| rapidfort alma 10 | fence-agents-cisco-ucs | no fix listed |
| rapidfort alma 10 | fence-agents-common | no fix listed |
| rapidfort alma 10 | fence-agents-drac5 | no fix listed |
| rapidfort alma 10 | fence-agents-eaton-snmp | no fix listed |
| rapidfort alma 10 | fence-agents-emerson | no fix listed |
| rapidfort alma 10 | fence-agents-eps | no fix listed |
| rapidfort alma 10 | fence-agents-gce | no fix listed |
| rapidfort alma 10 | fence-agents-heuristics-ping | no fix listed |
| rapidfort alma 10 | fence-agents-hpblade | no fix listed |
| rapidfort alma 10 | fence-agents-ibm-powervs | no fix listed |
| rapidfort alma 10 | fence-agents-ibm-vpc | no fix listed |
| rapidfort alma 10 | fence-agents-ibmblade | no fix listed |
| rapidfort alma 10 | fence-agents-ifmib | no fix listed |
| rapidfort alma 10 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort alma 10 | fence-agents-ilo-mp | no fix listed |
| rapidfort alma 10 | fence-agents-ilo-ssh | no fix listed |
| rapidfort alma 10 | fence-agents-ilo2 | no fix listed |
| rapidfort alma 10 | fence-agents-intelmodular | no fix listed |
| rapidfort alma 10 | fence-agents-ipdu | no fix listed |
| rapidfort alma 10 | fence-agents-ipmilan | no fix listed |
| rapidfort alma 10 | fence-agents-kdump | no fix listed |
| rapidfort alma 10 | fence-agents-kubevirt | no fix listed |
| rapidfort alma 10 | fence-agents-lpar | no fix listed |
| rapidfort alma 10 | fence-agents-mpath | no fix listed |
| rapidfort alma 10 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort alma 10 | fence-agents-openstack | no fix listed |
| rapidfort alma 10 | fence-agents-redfish | no fix listed |
| rapidfort alma 10 | fence-agents-rhevm | no fix listed |
| rapidfort alma 10 | fence-agents-rsa | no fix listed |
| rapidfort alma 10 | fence-agents-rsb | no fix listed |
| rapidfort alma 10 | fence-agents-sbd | no fix listed |
| rapidfort alma 10 | fence-agents-scsi | no fix listed |
| rapidfort alma 10 | fence-agents-virsh | no fix listed |
| rapidfort alma 10 | fence-agents-vmware-rest | no fix listed |
| rapidfort alma 10 | fence-agents-vmware-soap | no fix listed |
| rapidfort alma 10 | fence-agents-wti | no fix listed |
| rapidfort alma 10 | fence-agents-zvm | no fix listed |
| rapidfort alma 10 | fence-virt | no fix listed |
| rapidfort alma 10 | fence-virtd | no fix listed |
| rapidfort alma 10 | fence-virtd-cpg | no fix listed |
| rapidfort alma 10 | fence-virtd-libvirt | no fix listed |
| rapidfort alma 10 | fence-virtd-multicast | no fix listed |
| rapidfort alma 10 | fence-virtd-serial | no fix listed |
| rapidfort alma 10 | fence-virtd-tcp | no fix listed |
| rapidfort alma 10 | ha-cloud-support | no fix listed |
| rapidfort alma 9 | fence-agents-aliyun | no fix listed |
| rapidfort alma 9 | fence-agents-all | no fix listed |
| rapidfort alma 9 | fence-agents-amt-ws | no fix listed |
| rapidfort alma 9 | fence-agents-apc | no fix listed |
| rapidfort alma 9 | fence-agents-apc-snmp | no fix listed |
| rapidfort alma 9 | fence-agents-aws | no fix listed |
| rapidfort alma 9 | fence-agents-azure-arm | no fix listed |
| rapidfort alma 9 | fence-agents-bladecenter | no fix listed |
| rapidfort alma 9 | fence-agents-brocade | no fix listed |
| rapidfort alma 9 | fence-agents-cisco-mds | no fix listed |
| rapidfort alma 9 | fence-agents-cisco-ucs | no fix listed |
| rapidfort alma 9 | fence-agents-common | no fix listed |
| rapidfort alma 9 | fence-agents-compute | no fix listed |
| rapidfort alma 9 | fence-agents-drac5 | no fix listed |
| rapidfort alma 9 | fence-agents-eaton-snmp | no fix listed |
| rapidfort alma 9 | fence-agents-emerson | no fix listed |
| rapidfort alma 9 | fence-agents-eps | no fix listed |
| rapidfort alma 9 | fence-agents-gce | no fix listed |
| rapidfort alma 9 | fence-agents-heuristics-ping | no fix listed |
| rapidfort alma 9 | fence-agents-hpblade | no fix listed |
| rapidfort alma 9 | fence-agents-ibm-powervs | no fix listed |
| rapidfort alma 9 | fence-agents-ibm-vpc | no fix listed |
| rapidfort alma 9 | fence-agents-ibmblade | no fix listed |
| rapidfort alma 9 | fence-agents-ifmib | no fix listed |
| rapidfort alma 9 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort alma 9 | fence-agents-ilo-mp | no fix listed |
| rapidfort alma 9 | fence-agents-ilo-ssh | no fix listed |
| rapidfort alma 9 | fence-agents-ilo2 | no fix listed |
| rapidfort alma 9 | fence-agents-intelmodular | no fix listed |
| rapidfort alma 9 | fence-agents-ipdu | no fix listed |
| rapidfort alma 9 | fence-agents-ipmilan | no fix listed |
| rapidfort alma 9 | fence-agents-kdump | no fix listed |
| rapidfort alma 9 | fence-agents-kubevirt | no fix listed |
| rapidfort alma 9 | fence-agents-lpar | no fix listed |
| rapidfort alma 9 | fence-agents-mpath | no fix listed |
| rapidfort alma 9 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort alma 9 | fence-agents-openstack | no fix listed |
| rapidfort alma 9 | fence-agents-redfish | no fix listed |
| rapidfort alma 9 | fence-agents-rhevm | no fix listed |
| rapidfort alma 9 | fence-agents-rsa | no fix listed |
| rapidfort alma 9 | fence-agents-rsb | no fix listed |
| rapidfort alma 9 | fence-agents-sbd | no fix listed |
| rapidfort alma 9 | fence-agents-scsi | no fix listed |
| rapidfort alma 9 | fence-agents-virsh | no fix listed |
| rapidfort alma 9 | fence-agents-vmware-rest | no fix listed |
| rapidfort alma 9 | fence-agents-vmware-soap | no fix listed |
| rapidfort alma 9 | fence-agents-wti | no fix listed |
| rapidfort alma 9 | fence-agents-zvm | no fix listed |
| rapidfort alma 9 | fence-virt | no fix listed |
| rapidfort alma 9 | fence-virtd | no fix listed |
| rapidfort alma 9 | fence-virtd-cpg | no fix listed |
| rapidfort alma 9 | fence-virtd-libvirt | no fix listed |
| rapidfort alma 9 | fence-virtd-multicast | no fix listed |
| rapidfort alma 9 | fence-virtd-serial | no fix listed |
| rapidfort alma 9 | fence-virtd-tcp | no fix listed |
| rapidfort alma 9 | ha-cloud-support | no fix listed |
| rapidfort amazon linux 2023 | python3-jwt | 2.4.0-1.amzn2023.0.6 |
| rapidfort amazon linux 2023 | python3-jwt+crypto | 2.4.0-1.amzn2023.0.6 |
| rapidfort debian 12 | pyjwt | 0:2.14.0-1 |
| rapidfort debian 13 | pyjwt | 0:2.14.0-1 |
| rapidfort fedora 43 | fence-agents | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-aliyun | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-all | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-amt-ws | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-apc | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-apc-snmp | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-aws | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-azure-arm | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-bladecenter | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-brocade | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-cisco-mds | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-cisco-ucs | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-common | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-drac5 | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-eaton-snmp | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-emerson | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-eps | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-gce | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-heuristics-ping | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-hpblade | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ibm-powervs | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ibm-vpc | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ibmblade | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ifmib | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ilo-moonshot | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ilo-mp | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ilo-ssh | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ilo2 | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-intelmodular | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ipdu | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-ipmilan | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-kdump | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-kubevirt | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-lpar | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-mpath | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-nutanix-ahv | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-openstack | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-redfish | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-rhevm | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-rsa | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-rsb | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-sbd | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-scsi | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-virsh | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-vmware-rest | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-vmware-soap | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-wti | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-agents-zvm | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-virt | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-virtd | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-virtd-cpg | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-virtd-libvirt | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-virtd-multicast | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-virtd-serial | 4.17.0-2.fc43 |
| rapidfort fedora 43 | fence-virtd-tcp | 4.17.0-2.fc43 |
| rapidfort Oracle Linux 10 | fence-agents-aliyun | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-all | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-amt-ws | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-apc | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-apc-snmp | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-aws | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-azure-arm | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-bladecenter | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-brocade | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-cisco-mds | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-cisco-ucs | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-common | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-drac5 | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-eaton-snmp | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-emerson | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-eps | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-gce | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-heuristics-ping | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-hpblade | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ibm-powervs | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ibm-vpc | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ibmblade | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ifmib | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ilo-mp | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ilo-ssh | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ilo2 | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-intelmodular | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ipdu | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-ipmilan | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-kdump | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-kubevirt | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-lpar | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-mpath | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-openstack | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-redfish | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-rhevm | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-rsa | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-rsb | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-sbd | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-scsi | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-virsh | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-vmware-rest | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-vmware-soap | no fix listed |
| rapidfort Oracle Linux 10 | fence-agents-wti | no fix listed |
| rapidfort Oracle Linux 10 | fence-virt | no fix listed |
| rapidfort Oracle Linux 10 | fence-virtd | no fix listed |
| rapidfort Oracle Linux 10 | fence-virtd-cpg | no fix listed |
| rapidfort Oracle Linux 10 | fence-virtd-libvirt | no fix listed |
| rapidfort Oracle Linux 10 | fence-virtd-multicast | no fix listed |
| rapidfort Oracle Linux 10 | fence-virtd-serial | no fix listed |
| rapidfort Oracle Linux 10 | fence-virtd-tcp | no fix listed |
| rapidfort Oracle Linux 10 | ha-cloud-support | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-aliyun | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-all | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-amt-ws | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-apc | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-apc-snmp | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-aws | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-azure-arm | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-bladecenter | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-brocade | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-cisco-mds | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-cisco-ucs | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-common | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-compute | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-drac5 | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-eaton-snmp | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-emerson | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-eps | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-gce | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-heuristics-ping | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-hpblade | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ibm-powervs | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ibm-vpc | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ibmblade | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ifmib | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo-mp | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo-ssh | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ilo2 | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-intelmodular | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ipdu | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-ipmilan | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-kdump | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-kubevirt | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-lpar | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-mpath | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-openstack | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-redfish | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-rhevm | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-rsa | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-rsb | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-sbd | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-scsi | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-virsh | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-vmware-rest | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-vmware-soap | no fix listed |
| rapidfort Oracle Linux 9 | fence-agents-wti | no fix listed |
| rapidfort Oracle Linux 9 | fence-virt | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-cpg | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-libvirt | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-multicast | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-serial | no fix listed |
| rapidfort Oracle Linux 9 | fence-virtd-tcp | no fix listed |
| rapidfort Oracle Linux 9 | ha-cloud-support | no fix listed |
| rapidfort Red Hat 10 | fence-agents-aliyun | no fix listed |
| rapidfort Red Hat 10 | fence-agents-all | no fix listed |
| rapidfort Red Hat 10 | fence-agents-amt-ws | no fix listed |
| rapidfort Red Hat 10 | fence-agents-apc | no fix listed |
| rapidfort Red Hat 10 | fence-agents-apc-snmp | no fix listed |
| rapidfort Red Hat 10 | fence-agents-aws | no fix listed |
| rapidfort Red Hat 10 | fence-agents-azure-arm | no fix listed |
| rapidfort Red Hat 10 | fence-agents-bladecenter | no fix listed |
| rapidfort Red Hat 10 | fence-agents-brocade | no fix listed |
| rapidfort Red Hat 10 | fence-agents-cisco-mds | no fix listed |
| rapidfort Red Hat 10 | fence-agents-cisco-ucs | no fix listed |
| rapidfort Red Hat 10 | fence-agents-common | no fix listed |
| rapidfort Red Hat 10 | fence-agents-drac5 | no fix listed |
| rapidfort Red Hat 10 | fence-agents-eaton-snmp | no fix listed |
| rapidfort Red Hat 10 | fence-agents-emerson | no fix listed |
| rapidfort Red Hat 10 | fence-agents-eps | no fix listed |
| rapidfort Red Hat 10 | fence-agents-gce | no fix listed |
| rapidfort Red Hat 10 | fence-agents-heuristics-ping | no fix listed |
| rapidfort Red Hat 10 | fence-agents-hpblade | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ibm-powervs | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ibm-vpc | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ibmblade | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ifmib | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ilo-mp | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ilo-ssh | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ilo2 | no fix listed |
| rapidfort Red Hat 10 | fence-agents-intelmodular | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ipdu | no fix listed |
| rapidfort Red Hat 10 | fence-agents-ipmilan | no fix listed |
| rapidfort Red Hat 10 | fence-agents-kdump | no fix listed |
| rapidfort Red Hat 10 | fence-agents-kubevirt | no fix listed |
| rapidfort Red Hat 10 | fence-agents-lpar | no fix listed |
| rapidfort Red Hat 10 | fence-agents-mpath | no fix listed |
| rapidfort Red Hat 10 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort Red Hat 10 | fence-agents-openstack | no fix listed |
| rapidfort Red Hat 10 | fence-agents-redfish | no fix listed |
| rapidfort Red Hat 10 | fence-agents-rhevm | no fix listed |
| rapidfort Red Hat 10 | fence-agents-rsa | no fix listed |
| rapidfort Red Hat 10 | fence-agents-rsb | no fix listed |
| rapidfort Red Hat 10 | fence-agents-sbd | no fix listed |
| rapidfort Red Hat 10 | fence-agents-scsi | no fix listed |
| rapidfort Red Hat 10 | fence-agents-virsh | no fix listed |
| rapidfort Red Hat 10 | fence-agents-vmware-rest | no fix listed |
| rapidfort Red Hat 10 | fence-agents-vmware-soap | no fix listed |
| rapidfort Red Hat 10 | fence-agents-wti | no fix listed |
| rapidfort Red Hat 10 | fence-agents-zvm | no fix listed |
| rapidfort Red Hat 10 | fence-virt | no fix listed |
| rapidfort Red Hat 10 | fence-virtd | no fix listed |
| rapidfort Red Hat 10 | fence-virtd-cpg | no fix listed |
| rapidfort Red Hat 10 | fence-virtd-libvirt | no fix listed |
| rapidfort Red Hat 10 | fence-virtd-multicast | no fix listed |
| rapidfort Red Hat 10 | fence-virtd-serial | no fix listed |
| rapidfort Red Hat 10 | fence-virtd-tcp | no fix listed |
| rapidfort Red Hat 9 | fence-agents-aliyun | no fix listed |
| rapidfort Red Hat 9 | fence-agents-all | no fix listed |
| rapidfort Red Hat 9 | fence-agents-amt-ws | no fix listed |
| rapidfort Red Hat 9 | fence-agents-apc | no fix listed |
| rapidfort Red Hat 9 | fence-agents-apc-snmp | no fix listed |
| rapidfort Red Hat 9 | fence-agents-aws | no fix listed |
| rapidfort Red Hat 9 | fence-agents-azure-arm | no fix listed |
| rapidfort Red Hat 9 | fence-agents-bladecenter | no fix listed |
| rapidfort Red Hat 9 | fence-agents-brocade | no fix listed |
| rapidfort Red Hat 9 | fence-agents-cisco-mds | no fix listed |
| rapidfort Red Hat 9 | fence-agents-cisco-ucs | no fix listed |
| rapidfort Red Hat 9 | fence-agents-common | no fix listed |
| rapidfort Red Hat 9 | fence-agents-drac5 | no fix listed |
| rapidfort Red Hat 9 | fence-agents-eaton-snmp | no fix listed |
| rapidfort Red Hat 9 | fence-agents-emerson | no fix listed |
| rapidfort Red Hat 9 | fence-agents-eps | no fix listed |
| rapidfort Red Hat 9 | fence-agents-gce | no fix listed |
| rapidfort Red Hat 9 | fence-agents-heuristics-ping | no fix listed |
| rapidfort Red Hat 9 | fence-agents-hpblade | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ibm-powervs | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ibm-vpc | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ibmblade | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ifmib | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ilo-moonshot | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ilo-mp | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ilo-ssh | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ilo2 | no fix listed |
| rapidfort Red Hat 9 | fence-agents-intelmodular | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ipdu | no fix listed |
| rapidfort Red Hat 9 | fence-agents-ipmilan | no fix listed |
| rapidfort Red Hat 9 | fence-agents-kdump | no fix listed |
| rapidfort Red Hat 9 | fence-agents-kubevirt | no fix listed |
| rapidfort Red Hat 9 | fence-agents-lpar | no fix listed |
| rapidfort Red Hat 9 | fence-agents-mpath | no fix listed |
| rapidfort Red Hat 9 | fence-agents-nutanix-ahv | no fix listed |
| rapidfort Red Hat 9 | fence-agents-openstack | no fix listed |
| rapidfort Red Hat 9 | fence-agents-redfish | no fix listed |
| rapidfort Red Hat 9 | fence-agents-rhevm | no fix listed |
| rapidfort Red Hat 9 | fence-agents-rsa | no fix listed |
| rapidfort Red Hat 9 | fence-agents-rsb | no fix listed |
| rapidfort Red Hat 9 | fence-agents-sbd | no fix listed |
| rapidfort Red Hat 9 | fence-agents-scsi | no fix listed |
| rapidfort Red Hat 9 | fence-agents-virsh | no fix listed |
| rapidfort Red Hat 9 | fence-agents-vmware-rest | no fix listed |
| rapidfort Red Hat 9 | fence-agents-vmware-soap | no fix listed |
| rapidfort Red Hat 9 | fence-agents-wti | no fix listed |
| rapidfort Red Hat 9 | fence-agents-zvm | no fix listed |
| rapidfort Red Hat 9 | fence-virt | no fix listed |
| rapidfort Red Hat 9 | fence-virtd | no fix listed |
| rapidfort Red Hat 9 | fence-virtd-cpg | no fix listed |
| rapidfort Red Hat 9 | fence-virtd-libvirt | no fix listed |
| rapidfort Red Hat 9 | fence-virtd-multicast | no fix listed |
| rapidfort Red Hat 9 | fence-virtd-serial | no fix listed |
| rapidfort Red Hat 9 | fence-virtd-tcp | no fix listed |
| rapidfort rocky 10 | fence-agents | no fix listed |
| rapidfort rocky 10 | fence-agents-aliyun | no fix listed |
| rapidfort rocky 10 | fence-agents-all | no fix listed |
| rapidfort rocky 10 | fence-agents-aws | no fix listed |
| rapidfort rocky 10 | fence-agents-azure-arm | no fix listed |
| rapidfort rocky 10 | fence-agents-common | no fix listed |
| rapidfort rocky 10 | fence-agents-gce | no fix listed |
| rapidfort rocky 10 | fence-agents-kdump | no fix listed |
| rapidfort rocky 10 | fence-agents-kubevirt | no fix listed |
| rapidfort rocky 10 | fence-agents-openstack | no fix listed |
| rapidfort rocky 10 | fence-agents-redfish | no fix listed |
| rapidfort rocky 10 | fence-virt | no fix listed |
| rapidfort rocky 10 | fence-virtd | no fix listed |
| rapidfort rocky 10 | fence-virtd-cpg | no fix listed |
| rapidfort rocky 10 | fence-virtd-libvirt | no fix listed |
| rapidfort rocky 10 | fence-virtd-multicast | no fix listed |
| rapidfort rocky 10 | fence-virtd-serial | no fix listed |
| rapidfort rocky 10 | fence-virtd-tcp | no fix listed |
| rapidfort rocky 10 | ha-cloud-support | no fix listed |
| rapidfort rocky 9 | fence-agents | no fix listed |
| rapidfort rocky 9 | fence-agents-aliyun | no fix listed |
| rapidfort rocky 9 | fence-agents-all | no fix listed |
| rapidfort rocky 9 | fence-agents-aws | no fix listed |
| rapidfort rocky 9 | fence-agents-azure-arm | no fix listed |
| rapidfort rocky 9 | fence-agents-common | no fix listed |
| rapidfort rocky 9 | fence-agents-compute | no fix listed |
| rapidfort rocky 9 | fence-agents-gce | no fix listed |
| rapidfort rocky 9 | fence-agents-kdump | no fix listed |
| rapidfort rocky 9 | fence-agents-kubevirt | no fix listed |
| rapidfort rocky 9 | fence-agents-openstack | no fix listed |
| rapidfort rocky 9 | fence-agents-redfish | no fix listed |
| rapidfort rocky 9 | fence-virt | no fix listed |
| rapidfort rocky 9 | fence-virtd | no fix listed |
| rapidfort rocky 9 | fence-virtd-cpg | no fix listed |
| rapidfort rocky 9 | fence-virtd-libvirt | no fix listed |
| rapidfort rocky 9 | fence-virtd-multicast | no fix listed |
| rapidfort rocky 9 | fence-virtd-serial | no fix listed |
| rapidfort rocky 9 | fence-virtd-tcp | no fix listed |
| rapidfort rocky 9 | ha-cloud-support | no fix listed |
| rapidfort ubuntu 20.04 | rf-pyjwt | 0:2.15.1-1 |
| rapidfort ubuntu 22.04 | rf-pyjwt | 0:2.15.1-1 |
| rapidfort ubuntu 24.04 | rf-pyjwt | 0:2.15.1-1 |
| Red Hat | fence-agents | no fix listed |
| Red Hat | fence-agents-aliyun | no fix listed |
| Red Hat | fence-agents-all | no fix listed |
| Red Hat | fence-agents-amt-ws | no fix listed |
| Red Hat | fence-agents-apc | no fix listed |
| Red Hat | fence-agents-apc-snmp | no fix listed |
| Red Hat | fence-agents-aws | no fix listed |
| Red Hat | fence-agents-azure-arm | no fix listed |
| Red Hat | fence-agents-bladecenter | no fix listed |
| Red Hat | fence-agents-brocade | no fix listed |
| Red Hat | fence-agents-cisco-mds | no fix listed |
| Red Hat | fence-agents-cisco-ucs | no fix listed |
| Red Hat | fence-agents-common | no fix listed |
| Red Hat | fence-agents-compute | no fix listed |
| Red Hat | fence-agents-drac5 | no fix listed |
| Red Hat | fence-agents-eaton-snmp | no fix listed |
| Red Hat | fence-agents-emerson | no fix listed |
| Red Hat | fence-agents-eps | no fix listed |
| Red Hat | fence-agents-gce | no fix listed |
| Red Hat | fence-agents-heuristics-ping | no fix listed |
| Red Hat | fence-agents-hpblade | no fix listed |
| Red Hat | fence-agents-ibm-powervs | no fix listed |
| Red Hat | fence-agents-ibm-vpc | no fix listed |
| Red Hat | fence-agents-ibmblade | no fix listed |
| Red Hat | fence-agents-ifmib | no fix listed |
| Red Hat | fence-agents-ilo-moonshot | no fix listed |
| Red Hat | fence-agents-ilo-mp | no fix listed |
| Red Hat | fence-agents-ilo-ssh | no fix listed |
| Red Hat | fence-agents-ilo2 | no fix listed |
| Red Hat | fence-agents-intelmodular | no fix listed |
| Red Hat | fence-agents-ipdu | no fix listed |
| Red Hat | fence-agents-ipmilan | no fix listed |
| Red Hat | fence-agents-kdump | no fix listed |
| Red Hat | fence-agents-kubevirt | no fix listed |
| Red Hat | fence-agents-lpar | no fix listed |
| Red Hat | fence-agents-mpath | no fix listed |
| Red Hat | fence-agents-nutanix-ahv | no fix listed |
| Red Hat | fence-agents-openstack | no fix listed |
| Red Hat | fence-agents-redfish | no fix listed |
| Red Hat | fence-agents-rhevm | no fix listed |
| Red Hat | fence-agents-rsa | no fix listed |
| Red Hat | fence-agents-rsb | no fix listed |
| Red Hat | fence-agents-sbd | no fix listed |
| Red Hat | fence-agents-scsi | no fix listed |
| Red Hat | fence-agents-virsh | no fix listed |
| Red Hat | fence-agents-vmware-rest | no fix listed |
| Red Hat | fence-agents-vmware-soap | no fix listed |
| Red Hat | fence-agents-wti | no fix listed |
| Red Hat | fence-agents-zvm | no fix listed |
| Red Hat | fence-virt | no fix listed |
| Red Hat | fence-virtd | no fix listed |
| Red Hat | fence-virtd-cpg | no fix listed |
| Red Hat | fence-virtd-libvirt | no fix listed |
| Red Hat | fence-virtd-multicast | no fix listed |
| Red Hat | fence-virtd-serial | no fix listed |
| Red Hat | fence-virtd-tcp | no fix listed |
| Red Hat | ha-cloud-support | no fix listed |
| Red Hat | python-jwt | no fix listed |
| Red Hat | python-pyjwt | no fix listed |
| Red Hat | python2-jwt | no fix listed |
| Red Hat | python3-pyjwt | no fix listed |
| Red Hat | rhceph/rhceph-7-rhel9 | no fix listed |
| Red Hat | rhceph/rhceph-9-rhel9 | no fix listed |
| ubuntu 26.04 | pyjwt | no fix listed |
| ubuntu 26.10 | pyjwt | no fix listed |
| wolfi | datadog-agent-7.77 | 7.77.3-r26 |
| wolfi | datadog-agent-7.79 | 7.79.2-r20 |
| wolfi | datadog-agent-7.80 | 7.80.4-r19 |
| wolfi | datadog-agent-7.81 | 7.81.3-r8 |
| wolfi | ggshield | 1.55.0-r1 |
| wolfi | kserve | 0.21.0-r1 |
| wolfi | open-webui | 0.11.4-r1 |
| wolfi | py3-cassandra-medusa | 0.30.1-r1 |
| wolfi | semgrep | 1.178.0-r6 |
| wolfi | superset-6.1 | 6.1.0-r10 |
References
- https://access.redhat.com/security/cve/CVE-2026-102266
- https://advisory.echohq.com/cve/CVE-2026-102266
- https://github.com/jpadilla/pyjwt
- https://github.com/jpadilla/pyjwt/commit/f91ed44dd65baaf457f4b3353ed35e98a753934c
- https://github.com/jpadilla/pyjwt/releases/tag/2.14.0
- https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9j54-fg26-wv3r
- https://nvd.nist.gov/vuln/detail/CVE-2026-102266
- https://www.cve.org/CVERecord?id=CVE-2026-102266