UnratedFix available
node-jsonwebtoken v9.0.0
node-jsonwebtoken v9.0.0 includes key and algorithm validation changes associated with GHSA-8cf7-32gw-wr33.
Announced Group revision 1
Original source ↗github-auth0-node-jsonwebtoken
Primary source · Revision 1
These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.
Security context
v9.0.0: Merge pull request from GHSA-8cf7-32gw-wr33
node-jsonwebtoken
Release notes from node-jsonwebtoken
- Affected versions
- Not stated in this extraction
- Fixed versions
- v9.0.0
v9.0.0: Merge pull request from GHSA-8cf7-32gw-wr33
- Prerequisites
- Not stated in this extraction
Publisher severity
No explicit severity was extracted.
- Event
- #78632 · Revision 1
- Added to Heist Feed
- Publisher date