CVE-2026-32597 PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) Information published. EPSS 0.00 CVE-2026-32597 PyJWT US Microsoft Security · 24. 7. 10:01