Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Address GO-2024-3250 vulnerability #579

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Address GO-2024-3250 vulnerability #579

wants to merge 1 commit into from

Commits on Nov 12, 2024

  1. Address GO-2024-3250 vulnerability 

    https://pkg.go.dev/vuln/GO-2024-3250

Addressed by bumping the github.com/golang-jwt/jwt/v4 library from
v4.5.0 to v4.5.1.

Based on a quick look at the calls to ParseWithClaims (the affected
function) I don't think there was necessarily a problem to begin
with (we treated all errors as fatal), but this will make `go vuln`
happy which is important.
    @floren
    floren committed Nov 12, 2024
    Configuration menu
    Copy the full SHA
    8829dfd View commit details
    Browse the repository at this point in the history