jpadilla/pyjwt

Escaneado el 11 may 2026

Puntuación de riesgo/ 100

Riesgo alto

Resumen

PyJWT library exhibits high quantum vulnerability with 95 instances of quantum-susceptible algorithms including RSA, ECDSA (NIST P-256/384/521), and Ed25519. As a widely-used JWT implementation library, migration to post-quantum cryptography is critical to protect token integrity against future quantum attacks. The library's core cryptographic infrastructure requires comprehensive redesign to support NIST-approved PQC algorithms.

Crítico

Alto

Medio

Bajo

Hallazgos principales

AltoElliptic Curve Cryptography
tests/test_api_jws.py:28
Evidencia
```
EllipticCurvePublicKey,
```
AltoElliptic Curve Cryptography
jwt/algorithms.py:47
Evidencia
```
EllipticCurvePrivateKey,
```
Altosecp256k1 (Bitcoin curve)
tests/test_api_jwk.py:124
Evidencia
```
def test_should_load_key_ec_secp256k1_from_dict(self) -> None:
```
AltoECDSA
jwt/algorithms.py:41
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
Evidencia
```
ECDSA,
```
AltoNIST P-256 curve
jwt/algorithms.py:43
ML-KEM or ML-DSA
Evidencia
```
SECP256R1,
```

+ 92 hallazgos más en el reporte completo

Escanea tu propio repositorio

Gratis. Resultados en ~90 segundos. CBOM + PDF DORA/NIS2 incluidos.

Iniciar un escaneo gratis