Skip to content

Upgrade json-jwt gem to fix vulnerabilities.  #287

@skumarp7

Description

@skumarp7

Hi team,

Our security scans of splunk/fluent-plugin-splunk-hec have reported vulnerabilities on json-jwt:1.15.0 .
What would you like to be added:

Upgrade to fixed version of json-jwt to mitigate this vulnerability

Affected gem: json-jwt
Severity: High
Fixed version: 1.16.3

CVE-2023-51774: https://nvd.nist.gov/vuln/detail/CVE-2023-51774

Why is this needed:

To remove the vulnerability

Please let me know if i can raise a PR to fix this.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions