You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@pulsar.apache.org by GitBox <gi...@apache.org> on 2022/04/13 06:33:30 UTC

[GitHub] [pulsar-client-go] wolfstudy opened a new pull request, #759: [security] Upgrade jwt-go version to 3.2.1

wolfstudy opened a new pull request, #759:
URL: https://github.com/apache/pulsar-client-go/pull/759

   Signed-off-by: xiaolongran <xi...@tencent.com>
   
   
   Fixes #[apachepulsar: 14527](https://github.com/apache/pulsar/pull/14527)
   
   
   ### Motivation
   
   There's an existing advisory about this library: https://github.com/advisories/GHSA-w73w-5m7g-f7qc .
   
   ```
   There is no patch available and users of jwt-go are advised to migrate to [golang-jwt](https://github.com/golang-jwt/jwt) at version 3.2.1
   ```
   
   So we need to upgrade the jwt-go version to 3.2.1
   
   ### Modifications
   
    Upgrade jwt-go version to 3.2.1
   
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar-client-go] wolfstudy closed pull request #759: [WIP][security] Upgrade jwt-go version to 3.2.1

Posted by GitBox <gi...@apache.org>.

wolfstudy closed pull request #759: [WIP][security] Upgrade jwt-go version to 3.2.1
URL: https://github.com/apache/pulsar-client-go/pull/759


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

[GitHub] [pulsar-client-go] wolfstudy commented on pull request #759: [security] Upgrade jwt-go version to 3.2.1

Posted by GitBox <gi...@apache.org>.

wolfstudy commented on PR #759:
URL: https://github.com/apache/pulsar-client-go/pull/759#issuecomment-1097612153

   @zymap @lhotari PTAL thanks.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@pulsar.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org