Dependency maven:com.squareup.okio:okio-jvm:3.0.0 is vulnerable
Upgrade to 3.4.0
GHSA-w33c-445m-f8w7, Score: 5.9
GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.
Read More: https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7
Results powered by Checkmarx ©