Update nimbus-jose-jwt lib for CVE-2023-52428

rundeck-plugins · Apr 16, 2024 · 74ef43d · 74ef43d
1 parent ea6e082
commit 74ef43d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -70,8 +70,8 @@ dependencies {
         pluginLibs("com.squareup.retrofit2:adapter-rxjava:2.9.0")  {
             because "retrofit version by azure affected by CVE-2018-1000844"
         }
-        pluginLibs ('com.nimbusds:nimbus-jose-jwt:9.31') {
-            because "CVE-2023-1370, CVE-2021-31684"
+        pluginLibs ('com.nimbusds:nimbus-jose-jwt:9.37.3') {
+            because "CVE-2023-1370, CVE-2021-31684, CVE-2023-52428"
         }
     }