Skip to content

Address the vulnerability found in okhttp library #57

@sufyankhanrao

Description

@sufyankhanrao

A vulnerability CVE-2023-3635 7.5 is reported which states the following problem;

When converting from one data type to another, such as long to integer, data can be omitted or translated in a way that produces unexpected values.
If the resulting values are used in a sensitive context, then dangerous behaviors may occur.

This is affecting the okhttp library version 4.10.0 and should be updated to 4.12.0 to address this vulnerability.

Metadata

Metadata

Assignees

Labels

vulnerabilityThis label is for those tickets that contains the vulnerability problems.

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions