Product
The PyJWT library fails to reject unknown 'crit' header extensions as required by RFC 7515, creating a potential bypass vulnerability in JWT integrity and authentication checks.