duo-universal-sdk v1.1.3 dependencies with vulnerabilities

[mamazondra]

I am using Java duo-universal-sdk v1.1.3 and getting vulnerabilities reported from dependencies:

• com.fasterxml.jackson.core:jackson-core:2.3.2
• com.fasterxml.jackson.core:jackson-databind:2.3.2
• com.squareup.okhttp3:okhttp:3.14.19
• com.squareup.okio:okio:1.17.2

Any suggestions how to resolve this?

[DuoKristina]

Can you please open an issue on the repo for this? https://github.com/duosecurity/duo_universal_java/issues