You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Oct 15, 2024. It is now read-only.
Hi,
Our recent security scan reported a few vulnerabilities from jsonld-signatures-bbs. This seems mostly to be because jsonld-signatures-bbs is not using the latest version of jsonld and jsonld-signature. I wonder when will you upgrade the dependencies.
To recreate this, just do:
npm i @mattrglobal/jsonld-signatures-bbs
You will see that npm reports 7 moderate severity vulnerabilities. Some of those are flagged as high severity per WhiteSource scan.
The text was updated successfully, but these errors were encountered:
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Hi,
Our recent security scan reported a few vulnerabilities from jsonld-signatures-bbs. This seems mostly to be because jsonld-signatures-bbs is not using the latest version of jsonld and jsonld-signature. I wonder when will you upgrade the dependencies.
To recreate this, just do:
npm i @mattrglobal/jsonld-signatures-bbs
You will see that npm reports 7 moderate severity vulnerabilities. Some of those are flagged as high severity per WhiteSource scan.
The text was updated successfully, but these errors were encountered: