Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore: upgrading jsonwebtoken to fix vulnerability #1018

Merged
merged 1 commit into from Apr 8, 2024
Merged

chore: upgrading jsonwebtoken to fix vulnerability #1018

merged 1 commit into from Apr 8, 2024

Conversation

tiwarishubham635
Copy link
Contributor

@tiwarishubham635 tiwarishubham635 commented Apr 6, 2024 •
edited

Fixes #944

jsonwebtoken fixed the semver vulnerability in v9.0.2. Upgrading the version of jsonwebtoken here to avoid downstream vulnerability.

Checklist

  • I acknowledge that all my contributions will be made under the project's license
  • I have made a material change to the repo (functionality, testing, spelling, grammar)
  • I have read the Contribution Guidelines and my PR follows them
  • I have titled the PR appropriately
  • I have updated my branch with the main branch
  • I have added tests that prove my fix is effective or that my feature works
  • I have added the necessary documentation about the functionality in the appropriate .md file
  • I have added inline documentation to the code I modified

If you have questions, please file a support ticket, or create a GitHub Issue in this repository.

@tiwarishubham635 tiwarishubham635 mentioned this pull request Apr 6, 2024
Closed
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Apr 6, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud

manisha1997
manisha1997 approved these changes Apr 8, 2024
View reviewed changes
Copy link

@manisha1997 manisha1997 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@tiwarishubham635 tiwarishubham635 merged commit 2a2f71f into main Apr 8, 2024
16 checks passed
@tiwarishubham635 tiwarishubham635 deleted the jsonwebtoken-vulnerability branch April 8, 2024 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@manisha1997 manisha1997 manisha1997 approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Downstream dependency has vulnerability
2 participants
@tiwarishubham635 @manisha1997