{"action":"Upgrade com.squareup.okio:okio-jvm to 3.4.0 or later.","affected":[{"fixed":"3.4.0","introduced":"2.0.0-RC1"}],"component":"com.squareup.okio:okio-jvm","cve_ids":["CVE-2023-3635"],"ecosystem":"Maven","epss":0.01254,"exploited":false,"fixed_versions":["3.4.0"],"ghsa_id":"GHSA-w33c-445m-f8w7","id":"tcs_01M5N9F78EKA8YYZA5QFVRS6Y6","modified_at":"2026-09-10T03:49:54.860062065Z","published_at":"2023-07-12T21:30:50Z","references":["https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7","https://nvd.nist.gov/vuln/detail/CVE-2023-3635","https://github.com/square/okio/pull/1280","https://github.com/square/okio/pull/1334","https://github.com/square/okio/commit/81bce1a30af244550b0324597720e4799281da7b","https://github.com/square/okio/commit/b4fa875dc24950680c386e4b1c593660ce4f7839","https://github.com/square/okio","https://github.com/square/okio/blob/master/CHANGELOG.md#version-1176","https://research.jfrog.com/vulnerabilities/okio-gzip-source-unhandled-exception-dos-xray-523195"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-w33c-445m-f8w7#Maven/com.squareup.okio:okio-jvm","url":"https://osv.dev/vulnerability/GHSA-w33c-445m-f8w7"}],"summary":"Okio Signed to Unsigned Conversion Error vulnerability"}