GHSA-j5gq-897m-2rff
Race condition in the Okta Java SDK
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.okta.sdk:okta-sdk-root | >= 11.0.0, < 20.0.1 | 20.0.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Description
In the Okta Java SDK, race conditions may arise from concurrent requests using the ApiClient class. This could cause a status code or response header from one request’s response to influence another request’s response.
### Affected product and versions
You may be affected if you meet the following preconditions:
- Using the Okta Java SDK between versions 11.0.0 and 20.0.0, and
- Implementing a multithreaded application with the ApiClient class where the response status code is used in access control flows
### Resolution
Upgrade Okta/okta-sdk-java to versions 21.0.0 or greater.
References
External links from the advisory. They lead to third-party sites.