Replace python-jose dependency #565
Labels
priority: p1
Important issue which blocks shipping the next release. Will be fixed prior to next release.
type: bug
Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
A vulnerability has been found in the
ecdsa
dependency which will not be patched in thepython-jose
package.python-jose
seems to be abandoned. Other people are also encountering these security issues.I suggest to update authenticating-users/main.py to not use this insecure package. A commonly used alternative is PyJWT.
The text was updated successfully, but these errors were encountered: