auth0 / auth0-java

Java client library for the Auth0 platform
https://auth0.com
MIT License
290 stars 131 forks source link

(v1) Update Okio to resolve CVE-2023-3635 #561

Closed jimmyjames closed 1 year ago

jimmyjames commented 1 year ago

Excludes transient dependency okio from OkHttp and include 3.5.0 which resolves CVE-2023-3635. Once OkHttp 4.12.0 is released we can remove the manual okio dependency and exclude rule.