Request info on Jenkins+JsonWebToken(JWT) re: CVE-2022-23529

24 views
Skip to first unread message

the.n...@gmail.com

unread,
Jan 11, 2023, 1:16:30 PM1/11/23
to Jenkins Developers
Hi All,

I am looking for information on whether Jenkins has a vulnerability relating to JWT versions <= 8.5.1. Does Jenkins use this library?

Thanks,
Randall

Basil Crow

unread,
Jan 11, 2023, 2:19:31 PM1/11/23
to jenkin...@googlegroups.com
Based on the output of "yarn info" it does not show up in the
dependency tree of Jenkins core.

the.n...@gmail.com

unread,
Jan 12, 2023, 9:52:41 AM1/12/23
to Jenkins Developers
Awesome, thank you.
Reply all
Reply to author
Forward
0 new messages