Source: golang-github-dgrijalva-jwt-go-v3 Severity: normal Control: affects -1 go-cve-dictionary golang-github-go-kit-kit golang-github-azure-go-autorest golang-github-labstack-echo.v3 etcd goval-dictionary influxdb vuls golang-github-labstack-echo.v2
src:golang-github-dgrijalva-jwt-go/3.2.0-1 has been uploaded to archive for a long time. It's time to retire this golang-github-dgrijalva-jwt-go-v3 package. The following packages have direct build-depends on golang-github-dgrijalva-jwt-go-v3-dev: # build-rdeps --old golang-github-dgrijalva-jwt-go-v3-dev go-cve-dictionary golang-github-go-kit-kit golang-github-azure-go-autorest golang-github-labstack-echo.v3 etcd goval-dictionary influxdb vuls golang-github-labstack-echo.v2 Following packages may have patch to use github.com/dgrijalva/jwt-go-v3 import path. # https://codesearch.debian.net/search?q=jwt-go-v3&literal=1&perpkg=1 influxdb golang-github-go-kit-kit go-cve-dictionary kubernetes docker.io golang-github-dgrijalva-jwt-go vuls goval-dictionary gitlab-workhorse golang-github-labstack-echo.v3 golang-github-labstack-echo.v2 golang-github-dgrijalva-jwt-go-v3 golang-github-azure-go-autorest etcd I plan to team upload above packages in next few days. Thanks