JsonWebToken vunerability

[dsevans93]

There is a vunerability in JsonWebToken, which is a dependency of the tedious package, via azure/msal-indentity through to azure/msal-node. Detail here: GHSA-27h2-hvpr-p74q

azure/msal-node version 1.14.6 has upgraded JsonWebToken, according to the changelog here: https://github.com/AzureAD/microsoft-authentication-library-for-js/blob/dev/lib/msal-node/CHANGELOG.md

Discussion of msal-identity upgrading it's msal-node version here: Azure/azure-sdk-for-js#24340

I'm being asked by my organization to address this. Any information that could be shared about the situation would be appreciated.

Dave Evans