i have this vulnerability from elastic docker image
net.minidev:json-smart 2.4.8 2.4.9 Java usr/share/elasticsearch/modules/x-pack-security/nimbus-jose-jwt-9.23.jar
where can i find the nimbus config to update and what jwt are supposed in elastic versions
You can't update dependencies and libraries, you need to use the latest version and if the vulnerability is still being detected, you need to report it to Elastic.
Check this answer on your similar question.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.