Luke Patterson

org.json:json transitive dependency has security vulnerabilities

2

From `mvn dependency:tree` ``` [INFO] +- com.plaid:plaid-java:jar:17.0.0:compile [INFO] | +- org.apache.oltu.oauth2:org.apache.oltu.oauth2.client:jar:1.0.1:compile [INFO] | | +- org.apache.oltu.oauth2:org.apache.oltu.oauth2.common:jar:1.0.1:compile [INFO] | | | +- org.json:json:jar:20140107:compile ``` My build report is showing these vulnerabilities:...

com.squareup.okio:okio transitive dependency has security vulnerability

1

From `mvn dependency:tree` ``` [INFO] +- com.plaid:plaid-java:jar:17.0.0:compile [INFO] | +- com.squareup.okhttp3:okhttp:jar:4.9.3:compile [INFO] | | +- com.squareup.okio:okio:jar:2.8.0:compile ``` My build report is showing this vulnerability: https://nvd.nist.gov/vuln/detail/CVE-2023-3635 The direct dependency `com.squareup.okhttp3:okhttp`, which...