-
Notifications
You must be signed in to change notification settings - Fork 1.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
please publish a new NPM package #914
Comments
We also need to update package latest master version for vulnerability. |
Please also address CVE-2022-25883 - Medium Severity VulnerabilityLibrary home page: https://registry.npmjs.org/semver/-/semver-7.5.0.tgz
Dependency Hierarchy: Found in base branch: master
|
Until a new version will be published, you can force the transient dependency update by adding the following to your package.json: "overrides": { |
9.0.1 has been published https://www.npmjs.com/package/jsonwebtoken?activeTab=versions |
That new version v9.0.0...v9.0.1 did not fix the semver vulnerability |
This has been fixed in release v9.0.2. |
Hi,
I need the last commit about allowing to stub the decode method for a nodejs project I'm working on, would it be possible for you to release a new NPM package with this last commit?
Thank you in advance
The text was updated successfully, but these errors were encountered: