Server-side request forgery #972

Nawazsherif · 2021-01-28T12:28:47Z

I'm submitting this issue for the package(s):

jwt-verifier

I'm submitting a Bug Fix:

Please fix server-side request forgery from your side

oleksandrpravosudko-okta · 2021-01-28T12:39:17Z

Thanks for reporting this @Nawazsherif.

In case you are referring to reported transitive dependency vulnerability, its fix and release are underway. Please let us know if there is a different source of vulnerability you are aware of.

Nawazsherif · 2021-01-28T14:32:05Z

This is what I am exactly looking for. Thanks for the quick response.
Expecting the patch soon.

oleksandrpravosudko-okta · 2021-01-30T07:35:28Z

Released in v2.0.1

oleksandrpravosudko-okta closed this as completed Jan 30, 2021

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Server-side request forgery #972

Server-side request forgery #972

Nawazsherif commented Jan 28, 2021 •

edited

Loading

oleksandrpravosudko-okta commented Jan 28, 2021 •

edited

Loading

Nawazsherif commented Jan 28, 2021

oleksandrpravosudko-okta commented Jan 30, 2021

Server-side request forgery #972

Server-side request forgery #972

Comments

Nawazsherif commented Jan 28, 2021 • edited Loading

I'm submitting this issue for the package(s):

I'm submitting a Bug Fix:

oleksandrpravosudko-okta commented Jan 28, 2021 • edited Loading

Nawazsherif commented Jan 28, 2021

oleksandrpravosudko-okta commented Jan 30, 2021

Nawazsherif commented Jan 28, 2021 •

edited

Loading

oleksandrpravosudko-okta commented Jan 28, 2021 •

edited

Loading