Skip to content

Upgraded nimbus-jose-jwt version for azure

Li Song requested to merge az/ls-upgrade-nimbus-jose-jwt into master

Type of change

  • Bug Fix
  • Feature
  • Vulnerability mitigation

Please provide link to gitlab issue or ADR(Architecture Decision Record)

Does this introduce a change in the core logic?

  • No

Does this introduce a change in the cloud provider implementation, if so which cloud?

  • AWS
  • Azure
  • Google Cloud
  • IBM

Does this introduce a breaking change?

  • No

What is the current behavior?

What is the new/expected behavior?

Have you added/updated Unit Tests and Integration Tests?

Any other useful information

Upgraded com.nimbusds:nimbus-jose-jwt version for Azure to address CVE-2023-52428

Scan before upgrade:

image

Scan after upgrade:

image

Dependency tree before upgrade:

image

Dependency tree after upgrade:

image

Edited by Li Song

Merge request reports

Loading