Issue #257 - Address sec vuln (#258)

* Upgrade to com.nimbusds:nimbus-jose-jwt:9.37.2 * Also force upgrade brought in via com.danubetech:verifiable-credentials-java (1.6.0)
decentralized-identity · Mar 5, 2024 · 99f9f60 · 99f9f60
1 parent a43413f
commit 99f9f60
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/build.gradle.kts b/build.gradle.kts
@@ -50,6 +50,8 @@ allprojects {
       force("com.google.guava:guava:32.0.0-android")
       // Addresses https://github.com/TBD54566975/web5-kt/issues/244
       force("com.squareup.okio:okio:3.6.0")
+      // Addresses https://github.com/TBD54566975/web5-kt/issues/257
+      force("com.nimbusds:nimbus-jose-jwt:9.37.2")
     }
   }
 }

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
@@ -31,7 +31,7 @@ com_github_multiformats = "1.1.0"
 com_google_crypto_tink = "1.10.0"
 com_networknt_json_schema_validator = "1.0.87"
 com_nfeld_jsonpathkt = "2.0.1"
-com_nimbusds = "9.34"
+com_nimbusds = "9.37.2"
 com_squareup_okhttp3 = "4.12.0"
 com_willowtreeapps_assertk = "0.27.0"
 decentralized_identity_did_common_java = "1.9.0"