Full details for this CVE can be found on github.com/kelvinmo/simplejwt/security/advisories/GHSA-xw36-67f8-339x.