Skip to content

Firebase JWT Version #125

@MarceloZapatta

Description

@MarceloZapatta

This package is using an outdated version of firebase/php-jwt that has vulnerabilities.

Image

Problem 1
- get-stream/stream is locked to version v7.1.0 and an update of this package was not requested.
- get-stream/stream v7.1.0 requires firebase/php-jwt ^v6.4.0 -> found firebase/php-jwt[v6.4.0, ..., v6.11.1] but these were not loaded, because they are affected by security advisories. To ignore the advisories, add ("PKSA-y2cr-5h3j-g3ys") to the audit "ignore" config. To turn the feature off entirely, you can set "block-insecure" to false in your "audit" config.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions