Vulnerabilities
Patch PyJWT 2.13.0 to Stop Empty Key Token Forgery Attacks
A high-severity flaw in PyJWT allows attackers to forge tokens using empty keys. Users must upgrade to version 2.14.0 immediately to block this authentication bypass.
Python
Everything Patch Review has reported about Python: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Update HPE NonStop Python 3.x to Fix Directory Traversal Flaw CVE-2026-79824
A high-severity vulnerability in HPE NonStop Python 3.x allows attackers to overwrite files via crafted TAR archives, requiring immediate version checks.