# Need help in finding dependency map for nimbus jose jwt

**URL:** <https://discuss.elastic.co/t/need-help-in-finding-dependency-map-for-nimbus-jose-jwt/343169>\
**Category:** Elasticsearch\
**Tags:** docker\
**Created:** [September 15, 2023, 10:28pm UTC](https://discuss.elastic.co/t/need-help-in-finding-dependency-map-for-nimbus-jose-jwt/343169 "2023-09-15T22:28:28Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![balakr](https://avatars.discourse-cdn.com/v4/letter/b/c89c15/32.png) [@balakr](https://discuss.elastic.co/u/balakr)\
**Post date:** [September 15, 2023, 10:28pm UTC](https://discuss.elastic.co/t/need-help-in-finding-dependency-map-for-nimbus-jose-jwt/343169/1 "2023-09-15T22:28:28Z")

</div>

i have this vulnerability from elastic docker image

net.minidev:json-smart 2.4.8 2.4.9 Java usr/share/elasticsearch/modules/x-pack-security/nimbus-jose-jwt-9.23.jar

where can i find the nimbus config to update and what jwt are supposed in elastic versions

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [September 16, 2023, 5:07am UTC](https://discuss.elastic.co/t/need-help-in-finding-dependency-map-for-nimbus-jose-jwt/343169/2 "2023-09-16T05:07:04Z")

</div>

> [@balakr](#):
>
> where can i find the nimbus config to update and what jwt are supposed in elastic versions

You can't update dependencies and libraries, you need to use the latest version and if the vulnerability is still being detected, you need to report it to Elastic.

Check this answer on your similar [question](https://discuss.elastic.co/t/fixing-vulnerablities-in-logstash-code/343168/2).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 14, 2023, 5:08am UTC](https://discuss.elastic.co/t/need-help-in-finding-dependency-map-for-nimbus-jose-jwt/343169/3 "2023-10-14T05:08:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.