microsoft.identitymodel.jsonwebtokens.6.13.1.nupkg has been reported as medium risk in Mend - please upgrade or remove

Question

wellybilly opened this issue 9 days ago · comments

microsoft.identitymodel.jsonwebtokens.6.13.1.nupkg has been reported as medium risk in Mend - please upgrade or remove
check out: https://www.mend.io/vulnerability-database/CVE-2024-21319

The dependency path are:
box.v2.core.5.7.0.nupkg]
↓
system.identitymodel.tokens.jwt.6.13.1.nupkg
↓
microsoft.identitymodel.jsonwebtokens.6.13.1.nupkg