Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade jose to mitigate dependabot alert #1726

Open
6 tasks done
RaphaelManke opened this issue Apr 8, 2024 · 0 comments
Open
6 tasks done

Upgrade jose to mitigate dependabot alert #1726

RaphaelManke opened this issue Apr 8, 2024 · 0 comments

Comments

@RaphaelManke
Copy link

Checklist

Description

The currently referenced version of jose should be upgraded to at least 4.15.5 due to a vulnerability.
In our (private) repo dependabot alerts on that.

  "jose": "^4.9.2",

Reproduction

GHSA-hhhv-q57g-882q

Additional context

No response

nextjs-auth0 version

3.5.0

Next.js version

Node.js version

20

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant