From 333d529afce3314e9fb422646cd773e028448a2e Mon Sep 17 00:00:00 2001
From: Jan-Kazlouski-elastic <jan.kazlouski@elastic.co>
Date: Fri, 17 Jul 2026 01:27:07 +0300
Subject: [PATCH] fix(deps): pin PyJWT to 2.13.0 for CVE-2026-48526 (#4183)

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 requirements/framework.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/requirements/framework.txt b/requirements/framework.txt
index 8525c0675..c4b2e0dbf 100644
--- a/requirements/framework.txt
+++ b/requirements/framework.txt
@@ -10,6 +10,7 @@ cffi==1.16.0
 envyaml==1.10.211231
 ecs-logging==2.0.0
 pympler==1.0.1
+PyJWT==2.13.0
 cron-schedule-triggers==0.0.11
 tzcron==1.0.0
 pytz==2019.3