Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[email protected] > [email protected] vulnerability #251

Open
KsenyaJSN opened this issue Sep 22, 2023 · 1 comment
Open

[email protected] > [email protected] vulnerability #251

KsenyaJSN opened this issue Sep 22, 2023 · 1 comment

Comments

@KsenyaJSN
Copy link

Vulnerable Dependency Information:

Package Name: jsonwebtoken
Vulnerable Version: 9.0.0
Dependency with ReDoS Vulnerability: [email protected]
Vulnerability Severity: High

https://security.snyk.io/package/npm/semver

Fixed in jsonwebtoken v.9.0.2 (auth0/node-jsonwebtoken#921)

@Ks89
Copy link

Ks89 commented Sep 27, 2023

Hi @mikenicholson
This is an important vulnerability. This library should be updated quickly. I should be very easy to upgrade since v9.0.2 is a patch version and you are already using 9.0.0 on master.

Thanks

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants