This is an automated email from the ASF dual-hosted git repository. mblow pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/asterixdb.git
commit 2753cf0fdbd80f31d81518efa8cb7d5ab93f4e60 Author: Michael Blow <[email protected]> AuthorDate: Mon Aug 25 15:39:35 2025 -0400 [NO ISSUE][MISC] Update nimbus-jose-jwt to 10.0.2 to address CVE Ext-ref: MB-68239 Change-Id: Icd064fba94333f42cc5569a684c6b0ea00cd7cbf Reviewed-on: https://asterix-gerrit.ics.uci.edu/c/asterixdb/+/20267 Reviewed-by: Michael Blow <[email protected]> Reviewed-by: Ian Maxon <[email protected]> Tested-by: Michael Blow <[email protected]> --- asterixdb/pom.xml | 4 ---- hyracks-fullstack/hyracks/hyracks-hdfs/pom.xml | 4 ---- hyracks-fullstack/pom.xml | 9 +++++---- 3 files changed, 5 insertions(+), 12 deletions(-) diff --git a/asterixdb/pom.xml b/asterixdb/pom.xml index c5c278c84a..627f2132c6 100644 --- a/asterixdb/pom.xml +++ b/asterixdb/pom.xml @@ -1024,10 +1024,6 @@ <groupId>net.minidev</groupId> <artifactId>json-smart</artifactId> </exclusion> - <exclusion> - <groupId>com.nimbusds</groupId> - <artifactId>nimbus-jose-jwt</artifactId> - </exclusion> <exclusion> <groupId>commons-logging</groupId> <artifactId>commons-logging</artifactId> diff --git a/hyracks-fullstack/hyracks/hyracks-hdfs/pom.xml b/hyracks-fullstack/hyracks/hyracks-hdfs/pom.xml index ff4fd28a81..11f5eda025 100644 --- a/hyracks-fullstack/hyracks/hyracks-hdfs/pom.xml +++ b/hyracks-fullstack/hyracks/hyracks-hdfs/pom.xml @@ -99,10 +99,6 @@ <groupId>org.apache.hadoop</groupId> <artifactId>hadoop-common</artifactId> <exclusions> - <exclusion> - <groupId>com.nimbusds</groupId> - <artifactId>nimbus-jose-jwt</artifactId> - </exclusion> <exclusion> <groupId>javax.servlet.jsp</groupId> <artifactId>jsp-api</artifactId> diff --git a/hyracks-fullstack/pom.xml b/hyracks-fullstack/pom.xml index a72968d200..f0abd4c7ce 100644 --- a/hyracks-fullstack/pom.xml +++ b/hyracks-fullstack/pom.xml @@ -340,10 +340,6 @@ <groupId>net.minidev</groupId> <artifactId>json-smart</artifactId> </exclusion> - <exclusion> - <groupId>com.nimbusds</groupId> - <artifactId>nimbus-jose-jwt</artifactId> - </exclusion> <exclusion> <groupId>javax.servlet.jsp</groupId> <artifactId>jsp-api</artifactId> @@ -635,6 +631,11 @@ <artifactId>json-smart</artifactId> <version>2.4.11</version> </dependency> + <dependency> + <groupId>com.nimbusds</groupId> + <artifactId>nimbus-jose-jwt</artifactId> + <version>10.0.2</version> + </dependency> </dependencies> </dependencyManagement> <build>
