When will a security update to nimbus-jose-jwt dependency be issued?

[cmplank]

When will a security update to nimbus-jose-jwt dependency be issued?

[joshfree]

Hi @cmplank thanks for reaching out to us on github. In general, we ship updates every calendar month -- so the next update would be mid-March.

In the future, also be sure to check for a SECURITY.md in the root directory, as this will have instructions for how to report security-sensitive issues/questions/comments - and is also the only way reporters are eligible for bug bounties (e.g., responsibly disclosing).