Upgrading PyJWT to parse tokens in RSA-OAEP algorithm

[ratheesh-aot]

ISSUE#: https://jira.justice.gov.bc.ca/browse/DF-3105

To access DigitalForms prohibition svc APIs from Formsflow(custom realm) we need to update prohibition svc and Digitalform front end(may be obsolete in future) to use custom realm.
Related to that :
Upgrading PyJWT to parse tokens in RSA-OAEP algorithm

[github-actions]

rsbc-roadside-forms-backend-api:latest (redhat 8.10) - Trivy Report - 2025-02-24 19:26:35.653356191 +0000 UTC m=+0.391087299

redhat
No Vulnerabilities found
No Misconfigurations found
python-pkg
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
Pillow	CVE-2023-50447	CRITICAL	10.0.1	10.2.0	http://www.openwall.com/lists/oss-security/2024/01/20/1 https://access.redhat.com/errata/RHSA-2024:0893 https://access.redhat.com/security/cve/CVE-2023-50447 https://bugzilla.redhat.com/2259479 https://devhub.checkmarx.com/cve-details/CVE-2023-50447 https://devhub.checkmarx.com/cve-details/CVE-2023-50447/ https://duartecsantos.github.io/2023-01-02-CVE-2023-50447 https://duartecsantos.github.io/2023-01-02-CVE-2023-50447/ https://duartecsantos.github.io/2024-01-02-CVE-2023-50447 https://duartecsantos.github.io/2024-01-02-CVE-2023-50447/ https://errata.almalinux.org/8/ALSA-2024-0893.html https://github.com/python-pillow/Pillow python-pillow/Pillow@45c726f https://github.com/python-pillow/Pillow/releases https://linux.oracle.com/cve/CVE-2023-50447.html https://linux.oracle.com/errata/ELSA-2024-0893.html https://lists.debian.org/debian-lts-announce/2024/01/msg00019.html https://nvd.nist.gov/vuln/detail/CVE-2023-50447 https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html#imagemath-eval-restricted-environment-keys https://pillow.readthedocs.io/en/stable/releasenotes/10.2.0.html#security https://ubuntu.com/security/notices/USN-6618-1 https://www.cve.org/CVERecord?id=CVE-2023-50447
python-jose	CVE-2024-33663	CRITICAL	3.3.0	3.4.0	https://access.redhat.com/security/cve/CVE-2024-33663 https://github.com/mpdavis/python-jose mpdavis/python-jose#346 https://github.com/pypa/advisory-database/tree/main/vulns/python-jose/PYSEC-2024-232.yaml https://nvd.nist.gov/vuln/detail/CVE-2024-33663 https://www.cve.org/CVERecord?id=CVE-2024-33663 https://www.vicarius.io/vsociety/posts/algorithm-confusion-in-python-jose-cve-2024-33663
No Misconfigurations found

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ratheesh-aot]

closing as we created new release branch for the same release/2025.03.1

[github-actions]

rsbc-roadside-forms-backend-api:latest (redhat 8.10) - Trivy Report - 2025-02-24 20:39:14.864348491 +0000 UTC m=+0.377288465

redhat
No Vulnerabilities found
No Misconfigurations found
python-pkg
No Vulnerabilities found
No Misconfigurations found