Critical security issue in com.squareup.retrofit2:retrofit:2.2.0

[daschneider]

v2.2.0 of the retrofit library has a critical security vulnerability, please update to the latest release.

See:

• Lock down JAXB. Don't load remote entities. lysine-dev/retrofit#2735
• GHSA-j379-9jr9-w5cq

[gbrehmer]

Mohammed Huzaif Plivo (@huzaif-plivo) just mention you because you were the last person from plivo who commented another issue
the library is using a VERY old version from retrofit (released 2017: https://github.com/square/retrofit/releases/tag/parent-2.2.0). Please keep 3rd party libs uptodate. Thanks!