v2.0.2
Security
- Bump jsonwebtoken to v9 #1062 (dependabot)
This patch release is identical to 2.0.1
but has been released to ensure tooling no longer detects a vulnerable version of jsonwebtoken
being used.
Even though 2.0.1 was not vulnerable for the related CVE because of the fact that jsonwebtoken
is a devDependency, we are cutting a release to ensure build tools no longer report our SDK as vulnerable to the mentioned CVE.