How to upgrade com.squareup.okhttp(4.6.0) in GRPC OkHttp version (1.29.0)?

Viewed 559
1 Answers

The security issues in OkHttp 2.7.4 are in parts of the code not used by gRPC. In particular, none of the TLS code from OkHttp is used. There are no security issues in your configuration unless you also use OkHttp 2.7.4’s APIs directly.

Later releases of OkHttp use a different package name: okhttp3 instead of com.squareup.okhttp, so upgrading OkHttp won't help you anyway.

Related