Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-3635

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-w33c-445m-f8w7

Okio Signed to Unsigned Conversion Error vulnerability GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

gitlab/maven/com.squareup.okio/okio/CVE-2023-3635

Incorrect Conversion between Numeric Types GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.

gitlab/maven/com.squareup.okio/okio-jvm/CVE-2023-3635

Incorrect Conversion between Numeric Types GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.