mirror of
https://github.com/lightningnetwork/lnd.git
synced 2025-04-01 00:19:54 +02:00
The github.com/dgrijalva/jwt-go is no longer maintained has this CVE https://github.com/advisories/GHSA-w73w-5m7g-f7qc But it is being used by https://github.com/etcd-io/etcd/issues/13254 which `lnd` uses. The https://github.com/golang-jwt/jwt/releases/tag/v3.2.1 is a fork of the same version which was 3.2.0 with the security fix.