Merge pull request #38 from rundeck-plugins/RUN-2277

RUN-2277: Update nimbus-jose-jwt lib for CVE-2023-52428
rundeck-plugins · Apr 16, 2024 · 8dc7424 · 8dc7424
2 parents ea6e082 + 74ef43d
commit 8dc7424
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/build.gradle b/build.gradle
@@ -70,8 +70,8 @@ dependencies {
         pluginLibs("com.squareup.retrofit2:adapter-rxjava:2.9.0")  {
             because "retrofit version by azure affected by CVE-2018-1000844"
         }
-        pluginLibs ('com.nimbusds:nimbus-jose-jwt:9.31') {
-            because "CVE-2023-1370, CVE-2021-31684"
+        pluginLibs ('com.nimbusds:nimbus-jose-jwt:9.37.3') {
+            because "CVE-2023-1370, CVE-2021-31684, CVE-2023-52428"
         }
     }