security: upgrade nimbus-jose-jwt to 9.37.4 (patched version)

- Update from 9.37.2 to 9.37.4 to address CVE
- 9.37.2 is vulnerable, 9.37.4 is the patched version for 9.x line
- Verified with mvn dependency:tree that override is applied
This commit is contained in:
chrislu
2025-11-22 22:10:38 -08:00
parent e2e89b52b7
commit 9078ea64f1
+1 -1
View File
@@ -167,7 +167,7 @@
<dependency>
<groupId>com.nimbusds</groupId>
<artifactId>nimbus-jose-jwt</artifactId>
<version>9.37.2</version>
<version>9.37.4</version>
</dependency>
<!-- Snappy Java - Fix CVEs -->