From c445aefa7906ba49197665af4db863ca5daa0e4e Mon Sep 17 00:00:00 2001 From: FabioPinheiro Date: Mon, 19 Feb 2024 20:12:43 +0000 Subject: [PATCH] Update nimbus-jose-jwt to 9.37.3 --- build.sbt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.sbt b/build.sbt index 1a7e8a60..2065e876 100644 --- a/build.sbt +++ b/build.sbt @@ -416,7 +416,7 @@ lazy val didImp = crossProject(JSPlatform, JVMPlatform) .jvmSettings( // Add JVM-specific settings here libraryDependencies += "org.bouncycastle" % "bcprov-jdk18on" % "1.77", // https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on libraryDependencies += "org.bouncycastle" % "bcpkix-jdk18on" % "1.77", // https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-jdk18on - libraryDependencies += "com.nimbusds" % "nimbus-jose-jwt" % "9.37.2", // https://mvnrepository.com/artifact/com.nimbusds/nimbus-jose-jwt + libraryDependencies += "com.nimbusds" % "nimbus-jose-jwt" % "9.37.3", // https://mvnrepository.com/artifact/com.nimbusds/nimbus-jose-jwt // https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/release-9.35%0Drelease-9.32 // BUT have vulnerabilities in the dependencies: CVE-2023-2976