CVE(s) found in v0.20.7 #1488
Description
Latest lifecycle release v0.20.7 triggered CVE(s) from Grype. For further details, see: https://github.com/buildpacks/lifecycle/actions/runs/14025896604 json: {
"id": "GHSA-mh63-6h87-95cp",
"severity": "High",
"description": "jwt-go allows excessive memory allocation during header parsing"
}