Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can you please update jsonwebtoken to version 9.0.0? #900

Closed
salsabea opened this issue Jan 24, 2023 · 3 comments
Closed

Can you please update jsonwebtoken to version 9.0.0? #900

salsabea opened this issue Jan 24, 2023 · 3 comments
Labels
status: duplicate duplicate issue

Comments

@salsabea
Copy link

Issue Summary

jsonwebtoken has 4 critical vulnerabilities as mentioned in https://github.com/auth0/node-jsonwebtoken/security/advisories and these are fixed in version 9.0.0

Technical details:

  • twilio-node version: 3.84.1
  • node version: ">=6.0"
@shrutiburman
Copy link
Contributor

Duplicate issue #846 Please refer that for details.

@shrutiburman shrutiburman added the status: duplicate duplicate issue label Jan 24, 2023
@vetlevo
Copy link

vetlevo commented Jan 25, 2023 •
edited
Loading

I think they were gonna release v4 soon (today as per last comment I saw). However, I'm not sure if that was a solid date or anything. It's a bit difficult to know when there is no public release schedule. jsonwebtoken is updated in v4 as far as I know.

@childish-sambino
Copy link
Contributor

Yes, it's today in a few hours.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
status: duplicate duplicate issue
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@salsabea @vetlevo @childish-sambino @shrutiburman