dependency vulnerability with com.google.http-client detected

[alexis gayte]

Current version 1.12.2 has a dependency vulnerability with com.google.http-client

from :
com.google.http-client:google-http-client:1.46.3

https://mvnrepository.com/artifact/com.google.http-client/google-http-client/1.46.3

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908

[alexis gayte]

Hi Here,

google-http-java-client has been upgraded to version 2.0.0 to fix these vulnerabilities, (https://github.com/googleapis/google-http-java-client). Is it possible to upgrade  

com.google.crypto.tink

  apps-paymentmethodtoken dependency on it?

Regards,

Alexis GAYTE