python-PyJWT (SUSE:Linux Enterprise Module for Public Cloud 15 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Public Cloud 15 SP4 package python-PyJWT, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2026-32597 — CVSS 7.5 (high): PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined…
• CVE-2023-28859 — CVSS 6.5 (medium): redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and…
• CVE-2023-28858 — CVSS 3.7 (low): redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to…