ahopkins / sanic-jwt

Authentication, JWT, and permission scoping for Sanic
http://sanic-jwt.readthedocs.io
MIT License
242 stars 52 forks source link

Bump PyJWT to 2.4.0 #224

Closed virtualroot closed 2 years ago

virtualroot commented 2 years ago

PyJWT 2.1 is being reported as vulnerable. https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffqj-6fqr-9h24

I'm pinning v2.4.0 to receive the patch for this issue.

virtualroot commented 2 years ago

I won't be able to continue with this work. I'll open an issue to keep track of it.