7.5
CVSS V3
Status
Impact
The current go module being used (github.com/dgrijalva/jwt-go @ v3.2.0+incompatible) has no fixed version, and upgrading to github.com/dgrijalva/jwt-go/v4 requires code changes. This has already been done here: https://github.com/chrismellard/docker-credential-acr-env/commit/e883f69e0206edbbcac3a053aeefeef253c173f0, but we need upstream to cut a new release with those changes.
Status