Skip to content

Commit 82d9699

Browse files
authored
(v1) Update Okio to resolve CVE-2023-3635 (#562)
1 parent b33fa22 commit 82d9699

1 file changed

Lines changed: 7 additions & 2 deletions

File tree

build.gradle

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -63,12 +63,17 @@ test {
6363
}
6464

6565
ext {
66-
okhttpVersion = '4.10.0'
66+
okhttpVersion = '4.11.0'
6767
hamcrestVersion = '2.2'
6868
}
6969

7070
dependencies {
71-
implementation "com.squareup.okhttp3:okhttp:${okhttpVersion}"
71+
// TODO remove direct dependency when OkHttp 4.12.0 is released
72+
implementation ("com.squareup.okhttp3:okhttp:${okhttpVersion}") {
73+
exclude group: 'com.squareup.okhttp3', module: 'okio'
74+
}
75+
implementation "com.squareup.okio:okio:3.5.0"
76+
7277
implementation "com.squareup.okhttp3:logging-interceptor:${okhttpVersion}"
7378
implementation "com.fasterxml.jackson.core:jackson-databind:2.13.4.2"
7479
implementation "com.auth0:java-jwt:3.19.4"

0 commit comments

Comments
 (0)