-
Notifications
You must be signed in to change notification settings - Fork 594
Closed
Description
The current version uses github.com/golang-jwt/jwt v3.2.2+incompatible which has a vulnerability (GO-2025-3553) related to excessive memory allocation during header parsing.
We should update to github.com/golang-jwt/jwt/v5 which fixes this vulnerability.
This affects the following files in the generates package:
jwt_access.gojwt_access_test.go
The changes required are:
- Update the import path to
github.com/golang-jwt/jwt/v5 - Update the code to use the new JWT v5 API
- Update tests to use the new JWT v5 API
I'll submit a PR with these changes.
vavsab
Metadata
Metadata
Assignees
Labels
No labels