[TOMEE-4205] Jose4j 0.9.3

• Type: Dependency upgrade
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 8.0.14, 9.0.0
• Fix Version/s: 8.0.15, 10.0.0-M1, 9.1.0
• Component/s: TomEE Core Server
• Assignee: Richard Zowalla
• Reporter: RAJU THANNEERU
• Created: 02/May/23 05:11
• Updated: 06/Jun/23 05:50
• Resolved: 03/May/23 07:26

Description

New vulnerability identified on jose4j jar

See https://github.com/advisories/GHSA-jgvc-jfgh-rjvv for more details.

Issue Links

• links to: GitHub Pull Request #1038
• links to: GitHub Pull Request #1039