run-llama / llama-agents / 42178189441
85%

DEFAULT BRANCH: main
Ran
Jobs 12
Files 235
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.173%. Remained the same
42178189441

push

github

web-flow 
Update dependency pyjwt to v2.15.0 [SECURITY] (#873)

> [!NOTE]
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [pyjwt](https://redirect.github.com/jpadilla/pyjwt) | `2.14.0` →
`2.15.0` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/pyjwt/2.15.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pyjwt/2.14.0/2.15.0?slim=true)
|

---

### PyJWT: Unauthenticated RecursionError DoS in pre-verification
payload parse (PyJWKClient.get_signing_key_from_jwt /
verify_signature=False)
[CVE-2026-101918](https://nvd.nist.gov/vuln/detail/CVE-2026-101918) /
[GHSA-42vr-xj54-vc7v](https://redirect.github.com/advisories/GHSA-42vr-xj54-vc7v)

<details>
<summary>More information</summary>

#### Details
##### Summary

`PyJWKClient.get_signing_key_from_jwt(token)` — the first step of the
JWKS
verification flow documented in `docs/usage.rst` — must decode a token's
payload before its signature can be checked, via
`jwt.api_jwt.decode_complete(token, options={"verify_signature":
False})`.
That call parses the payload with `json.loads` in
`PyJWT._decode_payload`
(`jwt/api_jwt.py:297-300`), whose `except` clause catches only
`ValueError`.
A payload that is valid JSON but nested ~20,000 levels deep makes
`json.loads` raise `RecursionError`, which is **not** a `ValueError` and
escapes as a raw, undocumented exception type — not `DecodeError`,
`InvalidTokenError`, or `PyJWTError`, so every documented error-handling
pattern in `docs/usage.rst` misses it.

The token needs no valid signature and no network access — the crash
happens during payload parsing, before the `kid` is even looked up. A
single unauthenticated ~50KB request crashes the caller's auth handler
(HTTP 500 / dead worker), repeatably. The same path is reachable through
pl... (continued)

18962 of 22263 relevant lines covered (85.17%)

1.15 hits per line

Coverage Regressions

Lines Coverage ∆ File
1
88.03
-0.35% packages/llama-index-workflows/src/workflows/runtime/control_loop/runner.py
Jobs
ID Job ID Ran Files Coverage
1 llama-agents-core - 42178189441.1 15
81.34
GitHub Action Run
2 llama-agents-control-plane - 42178189441.2 31
74.61
GitHub Action Run
3 llama-agents-dbos - 42178189441.3 11
75.72
GitHub Action Run
4 llama-index-workflows - 42178189441.4 53
94.18
GitHub Action Run
5 llama-index-utils-workflow - 42178189441.5 1
70.84
GitHub Action Run
6 llamactl - 42178189441.6 48
79.79
GitHub Action Run
7 llama-agents-agentcore - 42178189441.7 5
70.22
GitHub Action Run
8 llama-agents-appserver - 42178189441.8 17
81.96
GitHub Action Run
9 llama-agents-client - 42178189441.9 4
95.32
GitHub Action Run
10 llama-agents-server - 42178189441.10 31
86.15
GitHub Action Run
11 llama-agents-integration-tests - 42178189441.11 102
64.95
GitHub Action Run
12 llama-agents-dev - 42178189441.12 12
76.5
GitHub Action Run
Source Files on build 42178189441