CVE-2026-32597 - Upgrade pyJWT
Open
Azure CLI Team
customer-reported
feature-request
Security-Issue
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 3.5k
- Avg merge
- 3d 2h
- Merged PRs (30d)
- 60
Description
### Describe the bug
The current version of az-cli is using a vulnerable package `PyJWT@2.10.1`.
Related CVE - CVE-2026-32597
GHSA - https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f
Please upgrade it to at least `2.12.0`
### Related command
NA
### Errors
NA
### Issue script & Debug output
NA
### Expected behavior
NA
### Environment Summary
azure-cli 2.84.0 is affected along with previous versions.
### Additional context
_No response_
Contributor guide
Assessment
This issue has not been assessed yet.