Skip to content

Commit 71a2128

Browse files
committed
fix: Downgrade OkHttp 5.0.0-alpha.7 -> 4.10.0
This change partially reverts the upgrade performed in #829, and is an alternative fix for #816. OkHttp 4.10.0 depends on Kotlin 1.6.20, which is not vulnerable to CVE-2020-29582. This downgrade also resolves #832. See: - https://square.github.io/okhttp/changelogs/changelog_4x/#version-4100 - https://nvd.nist.gov/vuln/detail/CVE-2020-29582
1 parent 916c5f5 commit 71a2128

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

build.gradle

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -52,12 +52,12 @@ artifacts {
5252

5353
dependencies {
5454
compileOnly 'com.google.appengine:appengine-api-1.0-sdk:2.0.4'
55-
api 'com.squareup.okhttp3:okhttp:5.0.0-alpha.7'
55+
api 'com.squareup.okhttp3:okhttp:4.10.0'
5656
api 'com.google.code.gson:gson:2.9.0'
5757
api 'io.opencensus:opencensus-api:0.31.0'
5858
implementation 'org.slf4j:slf4j-api:1.7.36'
5959
testImplementation 'junit:junit:4.13.2'
60-
testImplementation 'com.squareup.okhttp3:mockwebserver:5.0.0-alpha.7'
60+
testImplementation 'com.squareup.okhttp3:mockwebserver:4.10.0'
6161
testImplementation 'org.apache.httpcomponents:httpclient:4.5.13'
6262
testImplementation 'org.slf4j:slf4j-simple:1.7.36'
6363
testImplementation 'org.apache.commons:commons-lang3:3.12.0'

0 commit comments

Comments
 (0)