auth0 / express-jwt

connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Upgrade jsonwebtoken library

aliosmanisikk opened this issue · comments

Description

jsonwebtoken 8.5.1 has security vulnerability GHSA-27h2-hvpr-p74q and needs an upgrade to version 9.0.0

Given the seriousness of the vulnerability, upgrading to 9.0.0 should be top priority.

Published as express-jwt@8... no other breaking changes in this new release.
Updated changelog.