Skip to content

Upgrade okhttp to resolve CVE-2023-3635 #58

@dalbrx-nitrobox

Description

@dalbrx-nitrobox

CVE-2023-3635 was reported as a vulnerability of okio which okhttp (version 3.14.7) used in the Talon.One SDK depends on.

Could you please update okhttp to use a version which includes the fix?

For further reference, see also:

https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7
square/okhttp#8013

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions