Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[NET-6617] security: Bump github.com/golang-jwt/jwt/v4 to 4.5.0 #3237

Merged
merged 1 commit into from
Nov 27, 2023
Merged

[NET-6617] security: Bump github.com/golang-jwt/jwt/v4 to 4.5.0 #3237

merged 1 commit into from
Nov 27, 2023

Commits on Nov 21, 2023

  1. security: Bump github.com/golang-jwt/jwt/v4 to 4.5.0 

    This version is accepted by Prisma/Twistlock, resolving scan results for
issue PRISMA-2022-0270. Chosen over later versions to avoid a major
version with breaking changes that is otherwise unnecessary.

Note that in practice this is a false positive (see
golang-jwt/jwt#258), but we should update the
version to aid customers relying on scanners that flag it.
    @zalimeni
    zalimeni committed Nov 21, 2023
    Configuration menu
    Copy the full SHA
    908a343 View commit details
    Browse the repository at this point in the history