Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update jjwt and nimbus-jwt #19436

Merged
merged 2 commits into from
Oct 18, 2023
Merged

Update jjwt and nimbus-jwt #19436

merged 2 commits into from
Oct 18, 2023

Conversation

wendigo
Copy link
Contributor

@wendigo wendigo commented Oct 18, 2023 •
edited
Loading

jjwt:

[0.12.3](https://github.com/jwtk/jjwt/blob/master/CHANGELOG.md#0123)
This patch release:

Upgrades the org.json dependency to 20231013 to address that library's [CVE-2023-5072](https://nvd.nist.gov/vuln/detail/CVE-2023-5072) vulnerability.

nimbus:

version 9.37 (2023-10-16)
    * Adds JWTClaimsSet.getListClaim method.

@cla-bot cla-bot bot added the cla-signed label Oct 18, 2023
@wendigo wendigo merged commit 8400452 into master Oct 18, 2023
96 checks passed
@wendigo wendigo deleted the serafin/jjwt-updates-oidc branch October 18, 2023 15:09
@github-actions github-actions bot added this to the 430 milestone Oct 18, 2023
@mosabua mosabua mentioned this pull request Oct 20, 2023
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@kokosing kokosing kokosing approved these changes

@lukasz-walkiewicz lukasz-walkiewicz Awaiting requested review from lukasz-walkiewicz

Assignees
No one assigned
Labels
cla-signed
Milestone
430
Development

Successfully merging this pull request may close these issues.
2 participants
@wendigo @kokosing