Open sandeep-sks opened 2 years ago
Is there a plan to move away from jwt-go v3.2.0 dependency which has this vulnerability CVE-2020-26160 (CVE-2020-26160)
Patched version of dependencies or get rid of vulnerable dependencies that are not being maintained
A vulnerable version of dependency ( jwt-go v3.2.0)
Is there a plan to move away from jwt-go v3.2.0 dependency which has this vulnerability CVE-2020-26160 (CVE-2020-26160)
Expected Behavior
Patched version of dependencies or get rid of vulnerable dependencies that are not being maintained
Actual Behavior
A vulnerable version of dependency ( jwt-go v3.2.0)