Skip to content

Audit finding: https://github.com/advisories/GHSA-qwph-4952-7xr6 #27510

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
brave-builds opened this issue Dec 22, 2022 · 7 comments · Fixed by brave/brave-core#16463
Closed

Audit finding: https://github.com/advisories/GHSA-qwph-4952-7xr6 #27510

brave-builds opened this issue Dec 22, 2022 · 7 comments · Fixed by brave/brave-core#16463
Labels
bot/branch/v1.47 bot/branch/v1.48 bot/channel/beta bot/channel/dev bot/channel/nightly bot/type/audit ci-concern OS/Desktop QA/No release-notes/exclude
Milestone
1.46.x - Release #7

Comments

@brave-builds
Copy link
Collaborator

Greetings human!

Bad news. Audit failed on beta/v1.47.139 due to GHSA-qwph-4952-7xr6.
@brave-builds
Copy link
Collaborator Author

Audit failed on nightly/v1.48.78 due to GHSA-qwph-4952-7xr6.

@brave-builds
Copy link
Collaborator Author

Audit failed on dev/v1.47.140 due to GHSA-qwph-4952-7xr6.

@brave-builds
Copy link
Collaborator Author

Audit failed on beta/v1.47.141 due to GHSA-qwph-4952-7xr6.

@brave-builds
Copy link
Collaborator Author

Audit failed on nightly/v1.48.79 due to GHSA-qwph-4952-7xr6.

diracdeltas added a commit to brave/web-discovery-project that referenced this issue Dec 22, 2022
@diracdeltas
Override jsonwebtoken to be 9.0.0
54c4124 
Until mozilla/web-ext#2578 is fixed, this is
needed for
brave/brave-browser#27509
brave/brave-browser#27510
brave/brave-browser#27511
brave/brave-browser#27512
@diracdeltas diracdeltas mentioned this issue Dec 22, 2022
Merged
@brave-builds
Copy link
Collaborator Author

Audit failed on nightly/v1.48.80 due to GHSA-qwph-4952-7xr6.

remusao pushed a commit to brave/web-discovery-project that referenced this issue Dec 22, 2022
@diracdeltas
Override jsonwebtoken to be 9.0.0 (#256)
93fdbbd 
Until mozilla/web-ext#2578 is fixed, this is
needed for
brave/brave-browser#27509
brave/brave-browser#27510
brave/brave-browser#27511
brave/brave-browser#27512
@diracdeltas diracdeltas mentioned this issue Dec 22, 2022
Merged
25 tasks
@brave-builds
Copy link
Collaborator Author

Audit failed on beta/v1.47.142 due to GHSA-qwph-4952-7xr6.

@brave-builds
Copy link
Collaborator Author

Audit failed on nightly/v1.48.81 due to GHSA-qwph-4952-7xr6.

@brave-builds brave-builds added this to the 1.48.x - Nightly milestone Dec 23, 2022
This was referenced Dec 23, 2022
Merged
Merged
Closed
@brave-builds brave-builds added this to the 1.46.x - Release #7 milestone Dec 23, 2022
arthuredelstein pushed a commit to brave/brave-core that referenced this issue Jan 4, 2023
@diracdeltas @arthuredelstein
Update WDP to fix jsonwebtoken audit finding
c9f1f29 
fix brave/brave-browser#27509
fix brave/brave-browser#27510
fix brave/brave-browser#27511
fix brave/brave-browser#27512
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bot/branch/v1.47 bot/branch/v1.48 bot/channel/beta bot/channel/dev bot/channel/nightly bot/type/audit ci-concern OS/Desktop QA/No release-notes/exclude
Projects
None yet
Milestone
1.46.x - Release #7
Development

Successfully merging a pull request may close this issue.

Update WDP to fix jsonwebtoken audit finding brave/brave-core
2 participants
@diracdeltas @brave-builds