Bump jsrsasign from 10.5.24 to 10.5.25

[dependabot[bot]]

Bumps jsrsasign from 10.5.24 to 10.5.25.

Release notes

Sourced from jsrsasign's releases.

CVE-2022-25898 Security fix in JWS and JWT validation

• Changes from 10.5.24 to 10.5.25 (2022-Jun-23)
  • src/jws.js
    • JWS.verify and JWS.verifyJWT
      • CVE-2022-25898 SECURITY FIX: verify and verifyJWT may accept signature with special characters or \number characters by mistake. Please see security advisory: https://github.com/kjur/jsrsasign/security/advisories/GHSA-3fvg-4v2m-98jf
  • src/base64x.js
    • function isBase64URLDot added
  • test/qunit-do-jwt-veri.html

Changelog

Sourced from jsrsasign's changelog.

ChangeLog for jsrsasign

CVE-2022-25898 Security fix in JWS and JWT validation

• Changes from 10.5.24 to 10.5.25 (2022-Jun-23)
  • src/jws.js
    • JWS.verify and JWS.verifyJWT
      • CVE-2022-25898 SECURITY FIX: verify and verifyJWT may accept signature with special characters or \number characters by mistake. Please see security advisory: https://github.com/kjur/jsrsasign/security/advisories/GHSA-3fvg-4v2m-98jf
  • src/base64x.js
    • function isBase64URLDot added
  • test/qunit-do-jwt-veri.html

X509.getParam bugfix for v1 certificate

• Changes from 10.5.23 to 10.5.24 (2022-Jun-04)
  • src/x509.js
    • X509.getParam bugfix for X.509v1 certificate without extension

BitString parsing bug fix

• Changes from 10.5.22 to 10.5.23 (2022-May-27)
  • src/base64x.js
    • bitstrtobinstr bugfix fix
  • src/asn1hex.js
    • ASN1HEX.parse change for bin string range
  • npm/lib/footers.js
    • add missed exports (bitstrtobinstr, binstrtobitstr, namearraytobinstr, extendClass)
  • test/qunit-do-{asn1hex-parse,base64x}.html
    • add and fix some test cases for above

DERBitString, KeyUsage and tsp PKIFailureInfo critical bug fix

• Changes from 10.5.21 to 10.5.22 (2022-May-24)
  • src/asn1.js
    • DERBitString critical bugfix
  • src/asn1tsp.js
    • PKIFailureInfo critical bugfix
  • src/asn1x509.js
    • KeyUsage critical bugfix
  • src/base64.x
    • namearraytobinstr critical bugfix
  • test/qunit-do-{asn1,asn1tsp,asn1x509,base64x}.html
    • add and fix some test cases for above

DERBitString, KeyUsage and tsp PKIFailureInfo fix

• Changes from 10.5.20 to 10.5.21 (2022-May-23) RELEASE RESIGNED
  • src/asn1x509.js
    • KeyUsage bugfix, refactoring

... (truncated)

Commits

• 4536a6e CVE-2022-25898 Security fix in JWS and JWT validation
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will merge this PR once CI passes on it, as requested by @unknownskl.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)