(If you have no idea what a jwt or jwks is, you’re probably not impacted.)
A recent PR merged for Ghost 6.67 changes the length of the secret used for jwts. That’s a good thing, and is going to make it possible to validate them with jose. (Finally!)
But… if you have services out there validating member jwts against a cached copy of your site’s member jwks, you’re going to need a new one.
Love,
The dev replacing cached jwks values on a Friday night at bedtime.