mod : Replace for OSV GO-2020-0017 JWT
The github.com/dgrijalva/jwt-go is no longer maintained has this CVE https://github.com/advisories/GHSA-w73w-5m7g-f7qc But it is being used by https://github.com/etcd-io/etcd/issues/13254 which `lnd` uses. The https://github.com/golang-jwt/jwt/releases/tag/v3.2.1 is a fork of the same version which was 3.2.0 with the security fix.
This commit is contained in:
1 parent
15ec974b15
commit
8b4bbfbf61
5 files changed
+10
-2
No files matched your search
@@ -230,6 +230,8 @@ you.
|
||||
|
||||
* [Integration tests save embedded etcd logs to help debugging flakes](https://github.com/lightningnetwork/lnd/pull/5702)
|
||||
|
||||
* [Replace reference to JWT library with CVE](https://github.com/lightningnetwork/lnd/pull/5737)
|
||||
|
||||
* [Fixed restore backup file test flake with bitcoind](https://github.com/lightningnetwork/lnd/pull/5637).
|
||||
|
||||
* [Timing fix in AMP itest](https://github.com/lightningnetwork/lnd/pull/5725)
|
||||
|
||||
Reference in new issue
Block a user