2captcha-java
2captcha-java copied to clipboard
bumping okhttp to the latest 4.x release
Dependency maven:com.squareup.okhttp3:okhttp:4.7.2 is vulnerable
Upgrade to 4.9.2
CVE-2023-0833, Score: 5.5
A flaw was found in Red Hat's AMQ-Streams, which ships a version of the "OKHttp" component with an information disclosure flaw via an exception triggered by a header containing an illegal value. This issue could allow an authenticated attacker to access information outside of their regular permissions. This vulnerability affects com.squareup.okhttp3:okhttp package versions through 4.9.1, 4.10.0-RC1, and 5.0.0-alpha.1 through 5.0.0-alpha.2.
Read More: https://devhub.checkmarx.com/cve-details/CVE-2023-0833?utm_source=jetbrains&utm_medium=referral