[Snyk] Upgrade jwks-rsa from 1.8.0 to 1.12.3

[hpbonfim]

Snyk has created this PR to upgrade jwks-rsa from 1.8.0 to 1.12.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.

• The recommended version was released on 3 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	616	Proof of Concept
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	616	Proof of Concept
	Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	616	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	616	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	616	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	616	No Known Exploit

Release notes

Package name: jwks-rsa

• 1.12.3 - 2021-02-26
  

  [1.12.3] - (2021-02-25)

  Added

  • Add alg to SigningKey types #220 (okko)

  Fixed

  • Fix npmjs resolves #221 (adamjmcgrath)
  • Fix Import default Axios instance #216 (dsebastien)
• 1.12.2 - 2021-01-07
  

  Release 1.12.2

• 1.12.1 - 2020-12-29
  

  Release v1.12.1

• 1.12.0 - 2020-12-08
  

  Added

  • Provide an alternative source for supplying keysets #292 (davidpatrick)

  Deprecation
  We are deprecating passing in a jwksObject to the client for reasons laid out in #292. In order to load keys from anything other than the jwksUri, please use the getKeysInterceptor.

    const client = new JwksClient({ 
      jwksUri: 'https://my-enterprise-id-provider/.well-known/jwks.json',
      getKeysInterceptor: (cb) => {
        const file = fs.readFileSync(jwksFile);
        return cb(null, file.keys);
      }
    });

• 1.11.0 - 2020-10-23
• 1.10.1 - 2020-09-24
  

  Fixed

  • fix proxy agent for http #182 (NShahri)
  • fix dependencies for --production flag with npm #180 (alexrqs)
• 1.10.0 - 2020-09-23
  

  Release v1.10.0 (#178)

• 1.9.0 - 2020-08-18
  

  Added

  • Add promisified methods to JwksClient #161 (jimmyjames)
  • Update express-jwt ^6.0.0 #157 (davidpatrick)

  Fixed

  • Update Buffer initialization to non-deprecated method #154 (cwardcode)
  • Use axios url parameter instead of baseURL #153 (novascreen)

  Security

  • Bump lodash from 4.17.15 to 4.17.19 [#152](https://github.com/auth0/node-jwks
• 1.8.1 - 2020-06-19
  

  Release 1.8.1

• 1.8.0 - 2020-04-13

from jwks-rsa GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs