Manage nimbus-jose-jwt version to v9.37.2 (#622)

Addresses CVE-2023-52428 Signed-off-by: Michael Edgar <[email protected]>
streamshub · Mar 26, 2024 · 8bf7b30 · 8bf7b30
1 parent 8558a8d
commit 8bf7b30
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/api/pom.xml b/api/pom.xml
@@ -64,6 +64,12 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <!-- Manage nimbus-jose-jwt for CVE-2023-52428 -->
+            <dependency>
+                <groupId>com.nimbusds</groupId>
+                <artifactId>nimbus-jose-jwt</artifactId>
+                <version>9.37.2</version>
+            </dependency>
             <dependency>
                 <groupId>io.quarkus</groupId>
                 <artifactId>quarkus-bom</artifactId>