From 8bf7b30348419843b93afe0ab29428cae7c9dc28 Mon Sep 17 00:00:00 2001
From: Michael Edgar <medgar@redhat.com>
Date: Tue, 26 Mar 2024 12:27:03 -0400
Subject: [PATCH] Manage nimbus-jose-jwt version to v9.37.2 (#622)

Addresses CVE-2023-52428

Signed-off-by: Michael Edgar <medgar@redhat.com>
---
 api/pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/api/pom.xml b/api/pom.xml
index 28ff2c16d..0bdf59a20 100644
--- a/api/pom.xml
+++ b/api/pom.xml
@@ -64,6 +64,12 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <!-- Manage nimbus-jose-jwt for CVE-2023-52428 -->
+            <dependency>
+                <groupId>com.nimbusds</groupId>
+                <artifactId>nimbus-jose-jwt</artifactId>
+                <version>9.37.2</version>
+            </dependency>
             <dependency>
                 <groupId>io.quarkus</groupId>
                 <artifactId>quarkus-bom</artifactId>