cve 2026 32597

CVE-2026-32597 is a PyJWT token-validation flaw, not a Windows operating system vulnerability, and the practical fix is to update the Python dependency in applications and containers that verify JSON Web Tokens. PyJWT versions before 2.12.0 accepted JWS tokens declaring unknown critical header...