v1.22.6
Security
- Bump jsonwebtoken to v9 #1065 (frederikprijck)
This patch release is identical to 1.22.5
but has been released to ensure tooling no longer detects a vulnerable version of jsonwebtoken
being used.
Even though 1.22.5 was not vulnerable for the related CVE because of the fact that jsonwebtoken
is a devDependency, we are cutting a release to ensure build tools no longer report our SDK as vulnerable to the mentioned CVE.