Skip to content

launchdarkly eventsource-okhttp dependency needs an upgrade due to okio CVE #375

@palmski

Description

@palmski

Describe the bug

The version currently in use pulls in a version of okio that has a CVE. The library maintainers have resolved that issue launchdarkly/okhttp-eventsource#101 and have released 4.3.0

Can this upgrade please be applied here?

Steps to reproduce the bug

No response

Expected behavior

No response

Logs, error output, etc.

Screenshots

No response

Additional context

No response

Unleash version

No response

Subscription type

None

Hosting type

None

SDK information (language and version)

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    Status

    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions