Groups
Groups
Sign in
Groups
Groups
Jenkins Developers
Conversations
About
Send feedback
Help
Request info on Jenkins+JsonWebToken(JWT) re: CVE-2022-23529
24 views
Skip to first unread message
the.n...@gmail.com
unread,
Jan 11, 2023, 1:16:30 PM
1/11/23
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Jenkins Developers
Hi All,
I am looking for information on whether Jenkins has a vulnerability relating to JWT versions <= 8.5.1. Does Jenkins use this library?
Thanks,
Randall
Basil Crow
unread,
Jan 11, 2023, 2:19:31 PM
1/11/23
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to jenkin...@googlegroups.com
Based on the output of "yarn info" it does not show up in the
dependency tree of Jenkins core.
the.n...@gmail.com
unread,
Jan 12, 2023, 9:52:41 AM
1/12/23
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Jenkins Developers
Awesome, thank you.
Reply all
Reply to author
Forward
0 new messages