IntelliJ IDEA warns of vulnerable dependencies

[ThatBlockyPenguin]

Environment details

• Programming language: Java
• OS: Windows 11
• Language runtime version: Temurin JDK 25
• Package version: 1.18.0

Steps to reproduce

1. Add com.google.genai:google-genai:1.18.0 to a gradle project in IntelliJ IDEA
2. Check the "Problems" panel

Screenshots

Potential Fix

According to mvnrepository, version 1.19.0 of Apache Commons Codec is safe.

According to mvnrepository and GitHub, the earliest patched version is 3.25.5.

The issue with the Google Auth dependency may need reporting to them - which I can do if someone can point me in the direction of their bug tracker.

[nireekshak]

Hi @ThatBlockyPenguin, I appreciate you bringing this to our attention and for sharing the potential fix details!. I’ve escalated this issue to our internal team to investigate the vulnerable dependency in com.google.genai:google-genai:1.18.0. I’ll provide an update here once I receive more information from the team. Thanks!