Skip to content

chore(deps): bump fast-jwt from 6.2.2 to 6.3.4 - #563

Merged
AmirSa12 merged 1 commit into
stackblitz-labs:mainfrom
katsugtgz:dep/fast-jwt-6.3.4
Oct 15, 2026
Merged

AmirSa12 merged 1 commit into
stackblitz-labs:mainfrom
katsugtgz:dep/fast-jwt-6.3.4

Conversation

@katsugtgz

Copy link
Copy Markdown
Contributor

Updates fast-jwt to 6.3.4 to address GHSA-ww5h-9m49-7xx4, GHSA-gmvf-9v4p-v8jc, GHSA-8wpc-h4q6-8fxv, GHSA-5hjw-83fp-phq9, GHSA-687g-22h4-j4w4, and GHSA-x937-hj6v-793p.

Evidence:

  • pnpm-lock.yaml referenced fast-jwt@6.2.2 (devDependency of packages/app)
  • osv-scanner reported 6 fast-jwt advisories before the update, including two critical (CVSS 9.8 and 9.1)
  • updated version: 6.3.4

Validation:

  • osv-scanner no longer reports any fast-jwt advisory after the update (6 rows before, 0 after)
  • pnpm install --frozen-lockfile passes
  • pnpm --filter ./packages/app test: 21 passed (21)

Scope: packages/app/package.json and pnpm-lock.yaml only.

@AmirSa12 AmirSa12 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you!

@AmirSa12
AmirSa12 merged commit 7941b97 into stackblitz-labs:main Oct 15, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants