You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
npm audit fix error
jsonwebtoken <=8.5.1
Severity: high
To Reproduce
Steps to reproduce the behavior:
Run npm install fireblocks-sdk
Run npm audit fix
See below error:
# npm audit report
jsonwebtoken <=8.5.1
Severity: high
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC - https://github.com/advisories/GHSA-hjrf-2m68-5959
jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify() - https://github.com/advisories/GHSA-qwph-4952-7xr6
jsonwebtoken unrestricted key type could lead to legacy keys usage - https://github.com/advisories/GHSA-8cf7-32gw-wr33
jsonwebtoken has insecure input validation in jwt.verify function - https://github.com/advisories/GHSA-27h2-hvpr-p74q
No fix available
node_modules/jsonwebtoken
fireblocks-sdk *
Depends on vulnerable versions of jsonwebtoken
node_modules/fireblocks-sdk
Version:
fireblocks-sdk version: 2.5.3
npm version: 8.19.2
node version: v16.14.2
The text was updated successfully, but these errors were encountered:
npm audit fix error
jsonwebtoken <=8.5.1
Severity: high
To Reproduce
Steps to reproduce the behavior:
npm install fireblocks-sdk
npm audit fix
Version:
fireblocks-sdk
version: 2.5.3The text was updated successfully, but these errors were encountered: