PatchTheCVEjwcrypto vulnerabilities and fixes
Recent CVEs affecting jwcrypto, with upgrade or downgrade steps. 1 tracked.
jwcrypto has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-04-07. Highest priority: CVE-2026-39373 (score 34/100).
- CVE-2026-39373 MEDIUM 5.3 UPGRADE JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography
FAQ
How do I fix jwcrypto vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jwcrypto being exploited right now?
None of the tracked jwcrypto CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jwcrypto CVE should I patch first?
CVE-2026-39373 currently ranks highest (34/100): JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.