{"action":"Upgrade com.squareup.okio:okio to 1.17.6 (1.x) or 3.4.0 (3.x) or later.","affected":[{"fixed":"3.4.0","introduced":"2.0.0-RC1"},{"fixed":"1.17.6","introduced":"0"}],"component":"com.squareup.okio:okio","cve_ids":["CVE-2023-3635"],"ecosystem":"Maven","epss":0.01254,"exploited":false,"fixed_versions":["3.4.0","1.17.6"],"ghsa_id":"GHSA-w33c-445m-f8w7","id":"tcs_01M5N9F73VSRGBQ87X60W2CY8Q","modified_at":"2026-09-10T03:49:54.860062065Z","published_at":"2023-07-12T21:30:50Z","references":["https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7","https://nvd.nist.gov/vuln/detail/CVE-2023-3635","https://github.com/square/okio/pull/1280","https://github.com/square/okio/pull/1334","https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b","https://github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839","https://github.com/square/okio","https://github.com/square/okio/blob/master/CHANGELOG.md#version-1176","https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-w33c-445m-f8w7","url":"https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7"}],"summary":"Okio Signed to Unsigned Conversion Error vulnerability"}