[HADOOP-19115] upgrade to nimbus-jose-jwt 9.37.2 due to CVE

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.4.0, 3.5.0
• Fix Version/s: 3.3.9, 3.5.0, 3.4.1
• Component/s: build, CVE
• Labels: pull-request-available
• Assignee: PJ Fanning
• Reporter: PJ Fanning
• Created: 18/Mar/24 22:56
• Updated: 02/Apr/24 17:38
• Resolved: 02/Apr/24 17:38

Description

https://github.com/advisories/GHSA-gvpg-vgmx-xg6w

Issue Links

• relates to: HDDS-10600 Bump nimbus-jose-jwt version
• links to: GitHub Pull Request #6637
• links to: GitHub Pull Request #6682
• links to: GitHub Pull Request #6689