Address CVE-2023-1370

Change oauth2-oidc-sdk to 9.43.2
spring-projects · May 15, 2023 · ed0369a · ed0369a
1 parent ce5570b
commit ed0369a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/dependencies/spring-security-dependencies.gradle b/dependencies/spring-security-dependencies.gradle
@@ -20,7 +20,7 @@ dependencies {
 		api "ch.qos.logback:logback-classic:1.2.12"
 		api "com.google.inject:guice:3.0"
 		api "com.nimbusds:nimbus-jose-jwt:9.24.4"
-		api "com.nimbusds:oauth2-oidc-sdk:10.7.1"
+		api "com.nimbusds:oauth2-oidc-sdk:9.43.2"
 		api "com.squareup.okhttp3:mockwebserver:3.14.9"
 		api "com.squareup.okhttp3:okhttp:3.14.9"
 		api "com.unboundid:unboundid-ldapsdk:4.0.14"