pyjwt version 2.10.1 has a reported vulnerability involving weak encryption due to the lack of enforcement of a minimum key length. The supplier disputes the issue, stating that key length depends on the application using the library. The vulnerability has a high severity rating with a CVSS score of 7. No official patch or remediation guidance is currently available.