2captcha-java icon indicating copy to clipboard operation
2captcha-java copied to clipboard

bumping okhttp to the latest 4.x release

Open allanwsilva opened this issue 1 year ago • 0 comments

Dependency maven:com.squareup.okhttp3:okhttp:4.7.2 is vulnerable

Upgrade to 4.9.2

CVE-2023-0833, Score: 5.5

A flaw was found in Red Hat's AMQ-Streams, which ships a version of the "OKHttp" component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions. This vulnerability affects com.squareup.okhttp3:okhttp package versions through 4.9.1, 4.10.0-RC1, and 5.0.0-alpha.1 through 5.0.0-alpha.2.

Read More: https://devhub.checkmarx.com/cve-details/CVE-2023-0833?utm_source=jetbrains&utm_medium=referral

allanwsilva avatar Jul 07 '24 09:07 allanwsilva