Skip to content

fix links to blog post about critical vulnerabilities#158

Merged
potatosalad merged 1 commit into
potatosalad:mainfrom
aymanosman:main
Apr 7, 2024
Merged

fix links to blog post about critical vulnerabilities#158
potatosalad merged 1 commit into
potatosalad:mainfrom
aymanosman:main

Conversation

@aymanosman

Copy link
Copy Markdown
Contributor

No description provided.

@potatosalad

Copy link
Copy Markdown
Owner

@aymanosman Thanks!

@potatosalad potatosalad merged commit dc4720a into potatosalad:main Apr 7, 2024
potatosalad added a commit that referenced this pull request Apr 7, 2024
* Security Patches
  * [CVE-2023-50966](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50966): Add `jose:pbes2_count_maximum/0`.  By default, the maximum iterations are set to 10,000 and it will raise an error if `p2c` is larger than this value.
* Changes
  * Declare Poison as an optional dependency, thanks to [@lnikkila][https://github.com/lnikkila]; see [#144](#144).
  * Ensure `jiffy:encode/1` returns a binary, thanks to [@ssepml](https://github.com/ssepml); see [#145](#145).
  * Various type spec additions and dialyzer/dialyxir integrations, thanks to [@whatyouhide](https://github.com/whatyouhide) and [@maennchen](https://github.com/maennchen).
  * Doc updates and fixes, thanks to [@aymanosman](https://github.com/aymanosman) and [@adamu](https://github.com/adamu); see [#158](#158) and [#159](#159).
infra-ravenlabmkop added a commit to infra-ravenlabmkop/erlang-jose that referenced this pull request Sep 29, 2025
* Security Patches
  * [CVE-2023-50966](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50966): Add `jose:pbes2_count_maximum/0`.  By default, the maximum iterations are set to 10,000 and it will raise an error if `p2c` is larger than this value.
* Changes
  * Declare Poison as an optional dependency, thanks to [@lnikkila][https://github.com/lnikkila]; see [#144](potatosalad/erlang-jose#144).
  * Ensure `jiffy:encode/1` returns a binary, thanks to [@ssepml](https://github.com/ssepml); see [#145](potatosalad/erlang-jose#145).
  * Various type spec additions and dialyzer/dialyxir integrations, thanks to [@whatyouhide](https://github.com/whatyouhide) and [@maennchen](https://github.com/maennchen).
  * Doc updates and fixes, thanks to [@aymanosman](https://github.com/aymanosman) and [@adamu](https://github.com/adamu); see [#158](potatosalad/erlang-jose#158) and [#159](potatosalad/erlang-jose#159).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants