CVE-2026-32597 - Upgrade pyJWT

[blueelvis]

Describe the bug

The current version of az-cli is using a vulnerable package PyJWT@2.10.1.

Related CVE - CVE-2026-32597
GHSA - GHSA-752w-5fwx-jx9f

Please upgrade it to at least 2.12.0

Related command

NA

Errors

NA

Issue script & Debug output

NA

Expected behavior

NA

Environment Summary

azure-cli 2.84.0 is affected along with previous versions.

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

This issue is related to security. Please pay attention.

Powered by issue-sentinel