Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nsp found vulnerability #147

Comments

@oskaryil
Copy link

oskaryil commented Feb 16, 2018

node security check just found a new vulnerability in passport-jwt which goes down to jsonwebtoken > joi > hoek.
https://nodesecurity.io/advisories/566

image

@daraghking
Copy link

daraghking commented Feb 16, 2018

v8 of jsonwebtoken dropped the Joi dependency. I ran the tests on an updated dependency (v8.1.1) and they all pass.

This might be useful: https://github.com/auth0/node-jsonwebtoken/wiki/Migration-Notes:-v7-to-v8

@thiagobustamante
Copy link

Any news? It is breaking my build, once nsp is failing

@thiagobustamante
Copy link

@themikenicholson, Can I send a Pull Request to fix it?

@mikenicholson
Copy link
Owner

Fixed by 4.0.0 release. Closing.

Apologies for taking so long to get to this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment