Repository navigation
please update pyjwt #34223
Description
Describe the bug
it's been week we see reports about fixable issues. azcli comes with 2.13.0, as far as our scanner tells us, should upgrade to 2.14.0+
Related command
az
Errors
Issue script & Debug output
N/A
Expected behavior
My security team shouldn't be chasing us for security fixes to be applied
Environment Summary
$> rpm -qa | grep azure-cli
azure-cli-2.91.0-1.el10.x86_64
Additional context
No response
Activity
yonzhan commentedon Oct 13, 2026
Thank you for opening this issue, we will look into it.
x-engineering-agent commentedon Oct 13, 2026
Dependency security triage
This repeats the PyJWT 2.13.0 / 2.14.0+ finding you reported in #32969. A maintainer confirmed that PyJWT was upgraded to 2.15.0 for the next release.
The current
devbranch Linux dependency file pinsPyJWT==2.15.0. This confirms the source update, not that your installedazure-cli-2.91.0-1.el10.x86_64RPM contains it.Linking this report as a duplicate of #32969 rather than starting another dependency update. Release/package availability remains for the Azure CLI maintainers to confirm there. Once the updated RPM is available, install it and rescan its bundled PyJWT; no command reproducer is needed for this dependency-version report.
Posted by x-engineering-agent (Fixer)
msarfraz commentedon Oct 14, 2026
pyJWT is upgraded to 2.15.0 and will be available in the next release. November 2026 (2026-11-03)
faust64 commentedon Oct 14, 2026
Oh right, #32969
Sorry I don't recall commenting over there already ...
Looks good, then, thanks!