CVE-2023-3635 was reported as a vulnerability of okio which okhttp (version 3.14.7) used in the Talon.One SDK depends on.
Could you please update okhttp to use a version which includes the fix?
For further reference, see also:
https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7
square/okhttp#8013