Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: update jsonwebtoken to v9.0.0 #885

Closed
wants to merge 1 commit into from

Conversation

jfuginay
Copy link

Fixes #884

Raises jsonwebtoken in package.json to 9.0.0 to move past the v8 with newly found security vulnerabilities.

https://unit42.paloaltonetworks.com/jsonwebtoken-vulnerability-cve-2022-23529/

Checklist

  • I acknowledge that all my contributions will be made under the project's license
  • I have made a material change to the repo (functionality, testing, spelling, grammar)
  • [x ] I have read the Contribution Guidelines and my PR follows them
  • [x ] I have titled the PR appropriately
  • [ x] I have updated my branch with the main branch
  • [ x] I have added tests that prove my fix is effective or that my feature works
  • [x ] I have added the necessary documentation about the functionality in the appropriate .md file
  • [ x] I have added inline documentation to the code I modified

If you have questions, please file a support ticket, or create a GitHub Issue in this repository.

@claudiachua
Copy link

Closing this PR as changes have been made to twilio-node v4 release candidate.

@jimpopovitch
Copy link

This fix should be merged at least until such a time that the v4 release candidate is ready for production use.

@sergioutama
Copy link

We need this for v3 at least, please reopen

@jfuginay
Copy link
Author

jfuginay commented Jan 19, 2023 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Project package.json contains vulnerable version of jsonwebtoken
4 participants