[TOMEE-4205] Jose4j 0.9.3

• Type: Dependency upgrade
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.0.14, 9.0.0
• Fix Version/s: 10.0.0
• Component/s: TomEE Core Server
• Assignee: Richard Zowalla
• Reporter: RAJU THANNEERU
• Created: 02/May/23 05:11
• Updated: 16/Dec/24 07:51
• Resolved: 16/Dec/24 07:51

Description

New vulnerability identified on jose4j jar

See https://github.com/advisories/GHSA-jgvc-jfgh-rjvv for more details.

Issue Links

• links to: GitHub Pull Request #1038
• links to: GitHub Pull Request #1039