Hi team, Our security scans of splunk/fluent-plugin-splunk-hec have reported vulnerabilities on json-jwt:1.15.0 . What would you like to be added: Upgrade to fixed version of json-jwt to mitigate this vulnerability Affected gem: json-jwt Severity: High Fixed version: 1.16.3 CVE-2023-51774: https://nvd.nist.gov/vuln/detail/CVE-2023-51774 Why is this needed: To remove the vulnerability Please let me know if i can raise a PR to fix this.
Hi team,
Our security scans of splunk/fluent-plugin-splunk-hec have reported vulnerabilities on json-jwt:1.15.0 .
What would you like to be added:
Upgrade to fixed version of json-jwt to mitigate this vulnerability
Affected gem: json-jwt
Severity: High
Fixed version: 1.16.3
CVE-2023-51774: https://nvd.nist.gov/vuln/detail/CVE-2023-51774
Why is this needed:
To remove the vulnerability
Please let me know if i can raise a PR to fix this.