Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

jwks-rsa requires upgrade to fix known vulnerability. #2564

Closed
SmashingQuasar opened this issue May 20, 2024 · 1 comment · Fixed by #2570
Closed

jwks-rsa requires upgrade to fix known vulnerability. #2564

SmashingQuasar opened this issue May 20, 2024 · 1 comment · Fixed by #2570

Comments

@SmashingQuasar
Copy link

[READ] Step 1: Are you in the right place?

  • For issues related to the code in this repository file a Github issue.
  • If the issue pertains to Cloud Firestore, read the instructions in the "Firestore issue"
    template.
  • For general technical questions, post a question on StackOverflow
    with the firebase tag.
  • For general Firebase discussion, use the firebase-talk
    google group.
  • For help troubleshooting your application that does not fall under one
    of the above categories, reach out to the personalized
    Firebase support channel.

[REQUIRED] Step 2: Describe your environment

  • Operating System version: Debian 11
  • Firebase SDK version: 12.1.0
  • Firebase Product: global
  • Node.js version: 20.x
  • NPM version: 10.2.4

[REQUIRED] Step 3: Describe the problem

Steps to reproduce:

Simply run pnpm audit, it will return that the dependency jwks-rsa embarks a vulnerable dependency.
By upgrading jwks-rsa, the warning disappears.

@google-oss-bot
Copy link

I couldn't figure out how to label this issue, so I've labeled it for a human to triage. Hang tight.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants