Okio package vulnerable to - CVE-2023-3635

IBM / java-sdk-core

Core functionality required by Java code generated by the IBM Cloud OpenAPI SDK Generator (openapi-sdkgen)

https://ibm.github.io/java-sdk-core/

Apache License 2.0

20 stars 21 forks source link

Closed nitish-sudo closed 1 year ago

nitish-sudo commented 1 year ago

com.squareup.okio:okio-jvm:3.2.0 library is part of com.ibm.cloud:sdk-core and which is already pointing to latest 9.18.4 version available.

An issue was opened in the event-notifications-destination-android-sample-app related to Okio package in the core.

ibm-devx-sdk commented 1 year ago

:tada: This issue has been resolved in version 9.18.5 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: