Need help in finding dependency map for nimbus jose jwt

Elastic Stack Elasticsearch
1

i have this vulnerability from elastic docker image

net.minidev:json-smart 2.4.8 2.4.9 Java usr/share/elasticsearch/modules/x-pack-security/nimbus-jose-jwt-9.23.jar

where can i find the nimbus config to update and what jwt are supposed in elastic versions

2

You can't update dependencies and libraries, you need to use the latest version and if the vulnerability is still being detected, you need to report it to Elastic.

Check this answer on your similar question.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.