CVE-2021-0341 in okhttp@2.7.5 detected in hdfs-client

Our static vulnerability scanner (Fortify On Demand) detected NVD - CVE-2021-0341 (nist.gov) in our application. We traced the vulnerability to a transitive dependency coming from hadoop-hdfs-client, which depends on okhttp@2.7.5 (hadoop/pom.xml at trunk · apache/hadoop (github.com)). To resolve this issue, okhttp should be upgraded to 4.9.2+ (ref: CVE-2021-0341 · Issue #6724 · square/okhttp (github.com)).