jwks-rsa has high score vulnerability from jose dependency #443
Description
Checklist
- I have looked into the Readme and Examples, and have not found a suitable solution or answer.
- I have searched the issues and have not found a suitable solution or answer.
- I have searched the Auth0 Community forums and have not found a suitable solution or answer.
- I agree to the terms within the Auth0 Code of Conduct.
Description
The jose library less than version 6.0.10 is affected by CVE-2025-45767. The vulnerability has a CVSS score of 7, meaning high.
Reproduction
- Run a vulnerabilty scan of dependencies
Additional context
No response
jwks-rsa version
3.2.0
Node.js version
20.14.0