There's a CWE issued for jws library that's used on jsonwebtoken library that needs to be updated.
auth0/node-jsonwebtoken@ed59e76
The bump is simple and just goes from 9.0.2 to 9.0.3
This is indirectly affecting both socketcluster client and socketcluster server.
Ps: It would be nice to have dependabot enabled for socketcluster repos