Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: [#4400] Security vulnerabilityCVE-2022-23540, CVE-2022-23539, CVE-2022-23541, CVE-2022-23529 #4409

Merged

Conversation

erquirogasw
Copy link
Contributor

Fixes #4400
#minor

Description

This PR fixes the vulnerability alerts related to the jsonwebtoken version.

Specific Changes

Added jsonwebtoken v9.0.0 to the package.json resolutions.

Testing

browser-functional-build pipeline executed successfully.
image (186)

@erquirogasw erquirogasw requested a review from a team as a code owner January 16, 2023 13:54
@coveralls
Copy link

coveralls commented Jan 16, 2023

Pull Request Test Coverage Report for Build 3931058625

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage decreased (-0.003%) to 84.648%

Totals Coverage Status
Change from base Build 3841042555: -0.003%
Covered Lines: 19995
Relevant Lines: 22384

💛 - Coveralls

@tracyboehrer tracyboehrer merged commit 5fa4b7f into main Jan 31, 2023
@tracyboehrer tracyboehrer deleted the southworks/fix/jsonwebtoken-security-vulnerability branch January 31, 2023 15:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security vulnerabilityCVE-2022-23540, CVE-2022-23539, CVE-2022-23541, CVE-2022-23529
4 participants