Skip to content

chore(deps): update dependency jsonwebtoken to v9.0.1 (main)#84

Open
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile
Open

chore(deps): update dependency jsonwebtoken to v9.0.1 (main)#84
mend-for-github-com[bot] wants to merge 1 commit into
mainfrom
whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile

Conversation

@mend-for-github-com

@mend-for-github-com mend-for-github-com Bot commented Mar 23, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
jsonwebtoken 9.0.09.0.1 age adoption passing confidence

By merging this PR, the issue #70 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
High High 7.5 CVE-2025-65945

Reachable

Medium Medium 6.5 CVE-2026-2950

Reachable

Medium Medium 5.3 CVE-2022-25883

Reachable


Release Notes

auth0/node-jsonwebtoken (jsonwebtoken)

v9.0.1

Compare Source

  • fix(stubs): allow decode method to be stubbed

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com Bot added the security fix Security fix generated by Mend label Mar 23, 2026
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from 56298df to 854954d Compare March 27, 2026 01:30
@mend-for-github-com mend-for-github-com Bot added patch release and removed security fix Security fix generated by Mend labels Mar 27, 2026
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency jsonwebtoken to v9.0.1 (main) chore(deps): update dependency jsonwebtoken to v9.0.3 (main) Mar 27, 2026
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from 854954d to 68badd2 Compare April 18, 2026 12:35
@mend-for-github-com mend-for-github-com Bot added security fix Security fix generated by Mend and removed patch release labels Apr 18, 2026
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency jsonwebtoken to v9.0.3 (main) chore(deps): update dependency jsonwebtoken to v9.0.1 (main) Apr 18, 2026
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from 68badd2 to 4cb6194 Compare April 26, 2026 13:11
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency jsonwebtoken to v9.0.1 (main) chore(deps): update dependency jsonwebtoken to v9.0.3 (main) Apr 26, 2026
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from 4cb6194 to d735946 Compare April 26, 2026 20:02
@mend-for-github-com mend-for-github-com Bot changed the title chore(deps): update dependency jsonwebtoken to v9.0.3 (main) chore(deps): update dependency jsonwebtoken to v9.0.1 (main) Apr 26, 2026
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from d735946 to b00f2b5 Compare May 9, 2026 06:38
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from b00f2b5 to c4c10c6 Compare May 22, 2026 08:25
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch 3 times, most recently from 69bbcea to 7e23ac4 Compare June 10, 2026 08:23
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from 7e23ac4 to 6b6564b Compare June 15, 2026 06:50
@mend-for-github-com mend-for-github-com Bot force-pushed the whitesource-remediate/main-jsonwebtoken-9.0.x-lockfile branch from 6b6564b to 6233f63 Compare June 23, 2026 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants