CGA-h7h3-cgjg-wwxr

Published

Last updated

https://images.chainguard.dev/security/CGA-h7h3-cgjg-wwxr

Package

py3-pyjwt

RepositoryWolfi

Latest Update

Not affected

Aliases

CVE-2025-45768
GHSA-xpf8-484v-j9w6

Severity

Unknown

References

https://nvd.nist.gov/vuln/detail/CVE-2025-45768
https://github.com/advisories/GHSA-xpf8-484v-j9w6

Updates

Status

Not affected

Justification

Vulnerable code not present

Impact

This vulnerability is disputed by the upstream project because it pertains to key length which is set by the application using the library. NVD record reflecting this: https://nvd.nist.gov/vuln/detail/CVE-2025-45768

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-h7h3-cgjg-wwxr

Severity

References

Updates

Product

Solutions

Customers

Resources

Company