{"vulnerability": "CVE-2026-102268", "sightings": [{"uuid": "148f578e-7200-44a2-bbbe-36b1bab0e0dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102268", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mwm6d3imly2o", "content": "CVE-2026-102268 - pyjwt\nThe PyJWT library for Python, versions before 2.14.0, can be tricked into treating a modified public\u2011key file as a secret key. This lets anyone who knows the public key create\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pyjwt #jpadilla #CVE #infosec", "creation_timestamp": "2026-09-28T20:40:04.685416Z"}, {"uuid": "01b986f8-826a-438d-91b2-e1db8a8ad933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102268", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwmd7yinue2k", "content": "\ud83d\udea8 CVE-2026-102268 \u2014 CVSS 9.1 CRITICAL\n\nPyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, is_pem_format in jwt/utils.p...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102268\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-28T22:07:49.587039Z"}, {"uuid": "8b4940fb-858d-4634-bf78-23a180c535c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-102268", "type": "published-proof-of-concept", "source": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9", "content": "", "creation_timestamp": "2026-09-11T13:37:20.000000Z"}]}