search

hyperledger / fabric-sdk-go

https://wiki.hyperledger.org/display/fabric
Apache License 2.0
910 stars 510 forks source link

Use of vulnerable module jwt-go #235

Open RohanShrothrium opened 2 years ago

RohanShrothrium commented 2 years ago

jwt-go is an indirect dependency for fabric-sdk-go and there is a vulnerability in this module. The CVE report can be found here.

This can be removed by updating the module github.com/go-kit/kit to the latest version, v0.12.0.