Search results

Post-Quantum Cryptography: RS256/ES256/PS256 JWT algorithms are quantum-vulnerable — migration guidance

Status: Open.

#1178 In jpadilla/pyjwt;

· gaiabio12-design opened on May 31, 2026

Define Allowed Schemes at PyJWKClient init

Status: Open.

#1175 In jpadilla/pyjwt;

· davisjk opened on May 26, 2026

Expiration Bypass via Oversized exp Claim Value

Status: Open.

#1171 In jpadilla/pyjwt;

· YuvalElbar6 opened on May 21, 2026

FutureWarning: invalid character '/' in URL-safe Base64 data will be discarded in future Python versions

Status: Open.

#1167 In jpadilla/pyjwt;

· xsuchy opened on May 19, 2026

Expose response headers from JWKS fetches

Status: Open.

#1166 In jpadilla/pyjwt;

· cconroy opened on May 15, 2026

Support caching by Cache-Control: max-age

Status: Open.

#1165 In jpadilla/pyjwt;

· cconroy opened on May 15, 2026

test suite fails with updated Python 3.13.12 and others (CVE-2026-0672) in test_ec_curve_validation_with_pem_key and test_decodes_complete_valid_jwt_with_compressed_payload

Status: Open.

#1153 In jpadilla/pyjwt;

· mcepl opened on Mar 19, 2026

Security hardening: require explicit opt-in for alg="none" on encode/decode

Status: Open.

#1140 In jpadilla/pyjwt;

· OneTesseractInMultiverse opened on Feb 23, 2026

jwt.encode loses microseconds precision when using datetime for known time claims

Status: Open.

#1126 In jpadilla/pyjwt;

· rodrigovillarbello opened on Dec 25, 2025

Async Support in JWKS flow

Status: Open.

#1120 In jpadilla/pyjwt;

· pythonweb2 opened on Nov 10, 2025

Issue with type checking of algorithm parameter of jwt.decode methods

Status: Open.

#1117 In jpadilla/pyjwt;

· ajoyatklizos opened on Oct 27, 2025

Add PyJWK.to_dict and PyJWKSet.to_dict

Status: Open.

#1106 In jpadilla/pyjwt;

· dmytro-GL opened on Oct 22, 2025