mod : Replace for OSV GO-2020-0017 JWT

The github.com/dgrijalva/jwt-go is no longer maintained
has this CVE https://github.com/advisories/GHSA-w73w-5m7g-f7qc

But it is being used by https://github.com/etcd-io/etcd/issues/13254
which `lnd` uses.

The https://github.com/golang-jwt/jwt/releases/tag/v3.2.1 is a fork of
the same version which was 3.2.0 with the security fix.
This commit is contained in:
naveen committed 2021-09-16 11:23:28 +00:00
1 parent 15ec974b15
commit 8b4bbfbf61
5 files changed
+10 -2

No files matched your search

@@ -230,6 +230,8 @@ you.
* [Integration tests save embedded etcd logs to help debugging flakes](https://github.com/lightningnetwork/lnd/pull/5702)
* [Replace reference to JWT library with CVE](https://github.com/lightningnetwork/lnd/pull/5737)
* [Fixed restore backup file test flake with bitcoind](https://github.com/lightningnetwork/lnd/pull/5637).
* [Timing fix in AMP itest](https://github.com/lightningnetwork/lnd/pull/5725)