Richard Garčár comments

Repositories
Issues
Comments

Results 1 comments of


                                            Richard Garčár

Vulnerable dependency

The reported vulnerability is [CVE-2023-3635](https://nvd.nist.gov/vuln/detail/CVE-2023-3635). A related [pull request](https://github.com/googlemaps/google-maps-services-java/pull/928) upgrades the `com.squareup.okhttp3:okhttp` dependency from 4.11.0 to 4.12.0, which transitively [updates](https://square.github.io/okhttp/changelogs/changelog_4x/#version-4120) `com.squareup.okio:okio` to version 3.6.0. Could this PR be accepted?