matomo-org / matomo-org/plugin-GoogleAnalyticsImporter
Security: Please update dependency firebase/php-jwt
Open
Beginner friendly
Nobody has claimed this yet.
- Dominant language
- PHP
- Stars
- 29
- Forks
- 16
- Avg merge
- 15h 12m
- Merged PRs (30d)
- 14
Description
firebase/php-jwt has a low rated CVE in version 6.10.1, the CVE:s itslef is disputed, but package should be upgraded to a version that doesn't have the issue - which would be 7.0.0.
Information:
https://nvd.nist.gov/vuln/detail/CVE-2025-45769
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Locate the dependency declaration for firebase/php-jwt and review the project's current version constraints. Upgrade it to 7.0.0, then run the repository's available test or validation commands to confirm the importer still works and the vulnerable version is no longer used.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- security
- Issue type
- Bug
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Activity status
- Quiet
- Clarity
- Clearly specified
- Newbie friendliness
- 68/100