openSUSE Leap 15.6 — python3-jwcrypto — multiple vulnerabilities (4 CVEs) — patch and remediation guide
🟠 High ⏱ 15–60 min Last verified: 25 May 2026 Affected versions: openSUSE Leap 15.6 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2026:21425-1 (see also SUSE bugzilla) Related CVEs: CVE-2026-39373 CVE-2022-3102 CVE-2023-6681 CVE-2024-28102 Upstream summary: JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server […]