Java Wrapper (mailjet-client@5.2.5) Open Vulnerabilities
Java Wrapper open vulnerabilities
The Java Wrapper and it's dependency libraries currently expose two vulnerabilities:
Dependency: com.mailjet:mailjet-client@5.2.5 › com.squareup.okhttp3:okhttp@4.10.0 › org.jetbrains.kotlin:kotlin-stdlib@1.9.25
NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-29582
Dependency: com.mailjet:mailjet-client@5.2.5 › com.squareup.okhttp3:okhttp@4.10.0 › com.squareup.okio:okio-jvm@3.0.0
NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-3635
Both of these vulnerabilities are fixed from com.squareup.okhttp3:okhttp@4.12.0 and later.
1
vote
Petteri Salonurmi
shared this idea