Is your feature request related to a problem? Please describe ๐
Currently, the io.ktor:ktor-* artifacts of version 2.2.3 are hurt by the critical CVEs โ CVE-2023-45612 and CVE-2023-45613.
Describe the solution you'd like ๐ค
No need to wait for the breaking 3.0.0 release. Please add a new release that updates the io.ktor:ktor-* artifacts to the current latest versions (i.e. at least 2.3.5 or better 2.3.6 versions that fix the mentioned CVEs).
Describe alternatives you've considered โจ
Client version 3.0.0 MUST definitely depend on the updated io.ktor:ktor-* artifacts.
Additional context
These are the current dependencies of algoliasearch-client-kotlin-jvm:2.1.8:
+- com.algolia:algoliasearch-client-kotlin-jvm:jar:2.1.8:compile
| +- io.ktor:ktor-client-core-jvm:jar:2.2.3:compile
| | +- io.ktor:ktor-http-jvm:jar:2.2.3:compile
| | | \- io.ktor:ktor-utils-jvm:jar:2.2.3:compile
| | | \- io.ktor:ktor-io-jvm:jar:2.2.3:compile
| | +- io.ktor:ktor-events-jvm:jar:2.2.3:compile
| | +- io.ktor:ktor-websocket-serialization-jvm:jar:2.2.3:compile
| | \- org.jetbrains.kotlinx:kotlinx-coroutines-slf4j:jar:1.7.3:runtime
| +- org.jetbrains.kotlinx:kotlinx-serialization-json-jvm:jar:1.6.1:compile
| | \- org.jetbrains.kotlinx:kotlinx-serialization-core-jvm:jar:1.6.1:compile
| +- org.jetbrains.kotlin:kotlin-stdlib-common:jar:1.9.20:compile
| +- io.ktor:ktor-client-logging-jvm:jar:2.2.3:runtime
| +- io.ktor:ktor-serialization-kotlinx-json-jvm:jar:2.2.3:runtime
| | \- io.ktor:ktor-serialization-kotlinx-jvm:jar:2.2.3:runtime
| \- io.ktor:ktor-client-content-negotiation-jvm:jar:2.2.3:runtime
| \- io.ktor:ktor-serialization-jvm:jar:2.2.3:compile
| \- io.ktor:ktor-websockets-jvm:jar:2.2.3:compile
Is your feature request related to a problem? Please describe ๐
Currently, the
io.ktor:ktor-*artifacts of version2.2.3are hurt by the critical CVEs โ CVE-2023-45612 and CVE-2023-45613.Describe the solution you'd like ๐ค
No need to wait for the breaking
3.0.0release. Please add a new release that updates theio.ktor:ktor-*artifacts to the current latest versions (i.e. at least2.3.5or better2.3.6versions that fix the mentioned CVEs).Describe alternatives you've considered โจ
Client version
3.0.0MUST definitely depend on the updatedio.ktor:ktor-*artifacts.Additional context
These are the current dependencies of
algoliasearch-client-kotlin-jvm:2.1.8: