Repository navigation
Security Vulnerability: Outdated pyjwt Dependency (CVE-2026-32597) #526
Description
Description:
The current version of segment-analytics-python depends on pyjwt version 2.10.1, which is vulnerable to CVE-2026-32597. This vulnerability could potentially expose users to security risks related to JWT handling.
Details:
- Vulnerable package:
pyjwt - Current version used: 2.10.1
- Fixed in version: 2.12.0
- CVE: CVE-2026-32597
Recommended Action:
Update the pyjwt dependency to version 2.12.0 or later to address this security vulnerability.
Activity
grant-g commentedon Mar 19, 2026
Hi, for my planning, are you able to estimate when the new release with this fix will become available? Thank-you in advance!
fix: upgrade pyjwt to 2.12.1 to address CVE-2026-32597 (#527)
kurtabersold commentedon Apr 8, 2026
This fix was included in the 2.3.6 release.