Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Vulnerability in nimbus-jose-jwt-9.31 #26298

Open
olukas opened this issue Mar 26, 2024 · 2 comments
Open

Vulnerability in nimbus-jose-jwt-9.31 #26298

olukas opened this issue Mar 26, 2024 · 2 comments
Labels
security Pull requests that address a security vulnerability severity:high Vulnerability scan classification for High Severity issues Source: Internal PR or issue was opened by an employee Team: Integration Type: Test-Failure
Milestone
5.3.z

Comments

@olukas
Copy link
Contributor

olukas commented Mar 26, 2024

jet-files and jet-hadoop modules uses nimbus-jose-jwt in version 9.31 which includes following vulnerability:
@olukas olukas added Type: Test-Failure Source: Internal PR or issue was opened by an employee security Pull requests that address a security vulnerability severity:high Vulnerability scan classification for High Severity issues Team: Integration labels Mar 26, 2024
@olukas olukas added this to the 5.3.z milestone Mar 26, 2024
@frant-hartm
Copy link
Collaborator

NVD hasn't published any score yet. Github advisory marks it as moderate. No action needed at this point.

@sumnerib
Copy link
Contributor

sumnerib commented May 3, 2024

Also affects 5.2.z

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
security Pull requests that address a security vulnerability severity:high Vulnerability scan classification for High Severity issues Source: Internal PR or issue was opened by an employee Team: Integration Type: Test-Failure
Projects
None yet
Milestone
5.3.z
Development

No branches or pull requests
3 participants
@olukas @frant-hartm @sumnerib