From c9cf6b89d554889e771fe2ebe007889b7a0f85cf Mon Sep 17 00:00:00 2001 From: Derek Ho Date: Thu, 11 Jul 2024 12:43:57 -0400 Subject: [PATCH] Bump jose to address CVE (#4549) Signed-off-by: Derek Ho --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 2ccdae5618..fc1b22a135 100644 --- a/build.gradle +++ b/build.gradle @@ -175,7 +175,7 @@ dependencies { implementation 'org.ldaptive:ldaptive:1.2.3' implementation 'org.apache.httpcomponents:httpclient-cache:4.5.13' implementation 'io.jsonwebtoken:jjwt-api:0.10.8' - implementation("org.apache.cxf:cxf-rt-rs-security-jose:3.5.5") { + implementation("org.apache.cxf:cxf-rt-rs-security-jose:3.5.8") { exclude(group: 'jakarta.activation', module: 'jakarta.activation-api') } implementation 'com.github.wnameless:json-flattener:0.5.0'