jpadilla/pyjwt

Escaneado em 11 de mai. de 2026

Risk score/ 100

Risco alto

Resumo

PyJWT library exhibits high quantum vulnerability with 95 instances of quantum-susceptible algorithms including RSA, ECDSA (NIST P-256/384/521), and Ed25519. As a widely-used JWT implementation library, migration to post-quantum cryptography is critical to protect token integrity against future quantum attacks. The library's core cryptographic infrastructure requires comprehensive redesign to support NIST-approved PQC algorithms.

Crítico

Alto

Médio

Baixo

Principais findings

AltoElliptic Curve Cryptography
tests/test_api_jws.py:28
Evidência
```
EllipticCurvePublicKey,
```
AltoElliptic Curve Cryptography
jwt/algorithms.py:47
Evidência
```
EllipticCurvePrivateKey,
```
Altosecp256k1 (Bitcoin curve)
tests/test_api_jwk.py:124
Evidência
```
def test_should_load_key_ec_secp256k1_from_dict(self) -> None:
```
AltoECDSA
jwt/algorithms.py:41
ML-DSA (CRYSTALS-Dilithium) or SLH-DSA (SPHINCS+)
Evidência
```
ECDSA,
```
AltoNIST P-256 curve
jwt/algorithms.py:43
ML-KEM or ML-DSA
Evidência
```
SECP256R1,
```

+ 92 findings no relatório completo

Escaneie seu próprio repositório

Grátis. Resultados em ~90 segundos. CBOM + PDF DORA/NIS2 inclusos.

Começar scan grátis