heetch / heetch/confita

Transition from dgrijalva/jwt-go pkg to golang-jwt/jwt

Open
#92 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
507
Forks
49
PR merge metrics
No merged PRs in 30d

Description

`jwt-go` has a security vulnerability (CVE-2020-26160). There is no patch available and users of `jwt-go` are advised to migrate to `golang-jwt` at version 3.2.1. 👀

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the repository's jwt-go dependency and imports, then review how the package is used. Migrate those references to golang-jwt/jwt at version 3.2.1 and run the existing test suite to confirm configuration loading still works without the vulnerable dependency.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.