•  
      request #46798 firebase/php-jwt: 6.0.0 -> 7.0.2
    Infos
    #46798
    Thomas Gerbet (tgerbet)
    2026-02-18 14:14
    2026-02-18 10:33
    48524
    Details
    firebase/php-jwt: 6.0.0 -> 7.0.2

    This library is used by the MediaWiki Tuleap Integration to handle the authentication flow.
    This upgrade fixes CVE-2025-45769. This security issue has a very limited impact / is not exploitable in Tuleap / MW use case because the keys can only be provided by Tuleap and they meet the minimal length requirements set by the specification.

    Changes:
    https://github.com/firebase/php-jwt/releases/tag/v7.0.2
    https://github.com/firebase/php-jwt/releases/tag/v7.0.1
    https://github.com/firebase/php-jwt/releases/tag/v7.0.0

    Mediawiki Standalone
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2026-02-18
    Attachments
    Empty
    References
    Referenced by request #46798

    Follow-ups