CVE-2023-52428
1 advisory.
Maven/com.nimbusds:nimbus-jose-jwt CVE-2023-52428: high 7.5
Denial of Service in Connect2id Nimbus JOSE+JWT
Action: Upgrade com.nimbusds:nimbus-jose-jwt to 9.37.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 9.37.2 | - |
Fixed versions
| 9.37.2 |
Sources
- osv: GHSA-gvpg-vgmx-xg6w
- https://nvd.nist.gov/vuln/detail/CVE-2023-52428
- https://bitbucket.org/connect2id/nimbus-jose-jwt
- https://bitbucket.org/connect2id/nimbus-jose-jwt/commits/3b3b77e
- https://bitbucket.org/connect2id/nimbus-jose-jwt/issues/526
- https://connect2id.com/products/nimbus-jose-jwt
CVE-2023-52428 · published · modified · JSON