| Release | Version |
|---|---|
| jessie | 0.2.1-1+deb8u1 |
| jessie (security) | 0.2.1-1+deb8u2 |
| stretch | 1.4.2-1 |
| stretch (security) | 1.4.2-1+deb9u1 |
| buster | 1.4.2-1 |
| sid | 1.4.2-1 |
| Bug | jessie | stretch | buster | sid | Description |
|---|---|---|---|---|---|
| CVE-2017-11424 | fixed | fixed | vulnerable | vulnerable | In PyJWT 1.5.0 and below the `invalid_strings` check in ... |
| Bug | Description |
|---|---|
| TEMP-0781640-F16931 | Signature Bypass in several JSON Web Token Libraries |
| DSA / DLA | Description |
|---|---|
| DSA-3979-1 | pyjwt - security update |
| DSA-3979-1 | pyjwt - security update |
| DSA-3293-1 | pyjwt - security update |