New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Upgrade okhttp to resolve CVE-2023-3635 #58

Open

dalbrx-nitrobox opened this issue Dec 17, 2024 · 0 comments

dalbrx-nitrobox commented Dec 17, 2024 •

edited

Loading

CVE-2023-3635 was reported as a vulnerability of okio which okhttp (version 3.14.7) used in the Talon.One SDK depends on.

Could you please update okhttp to use a version which includes the fix?

For further reference, see also:

https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7
square/okhttp#8013

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment