search

omniphx / forrest

A Laravel library for Salesforce
https://omniphx.github.io/forrest/
MIT License
257 stars 120 forks source link

firebase/php-jwt dependency vulnerability #344

Open mosesbesong-nxlog opened 7 months ago

mosesbesong-nxlog commented 7 months ago

Hi guys,

The version of the firebase/php-jwt package used by this library suffers from a Key/algorithm type confusion vulnerability.

The current version of firebase/php-jwt dependency used by the Forrest library as of this writing is "^5.2|~6.0".

You can read about the vulnerability here: https://nvd.nist.gov/vuln/detail/CVE-2021-46743

omniphx commented 2 months ago

Hi @mosesbesong-nxlog, feel free to create a PR for this issue