certPinningVulnerableOkHttp

OkHttp simple-client app vulnerable to CVE-2016-2402 This is a fork of the default simple-client from the okhttp project. Simple-client is a Java app that just does a GET request to https://api.github.com and fetches the names of okhttp's contributors. This fork has been edited so that OkHttp 3.0...

atlantis-android

Atlantis Android Capture HTTP/HTTPS traffic from Android apps and send to Proxyman for debugging. Overview Atlantis Android is a companion library to Proxyman that allows you to capture and inspect network traffic from your Android applications without configuring a proxy or installing...

CVE-2026-111720

The fish-island-backend software (specifically versions through commit 7c61b78 ) is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) vulnerability. This flaw exists in the GET /api/web/parse endpoint, where the application fails to properly validate the url parameter. Remote at...

CVE-2026-111720 fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

CVE-2026-111720 fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopback services or clou...

frida-ssl-bypass

🔓 Frida SSL Pinning Bypass Universal SSL/TLS Certificate Pinning Bypass for Android Author: Danieldev GitHub: @danieldev23 | Telegram: @zadevz A comprehensive Frida toolkit that defeats SSL pinning on any Android app — covering both Java and Native layers, from standard OkHttp pinning to Facebook...

PT-2026-116119

🚨 CVE-2026-111720 fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts, loopbac...

ROOT-APP-MAVEN-CVE-2021-0341 CVE-2021-0341 in com.squareup.okhttp3:okhttp - Patched by Root

Root has patched CVE-2021-0341 in the com.squareup.okhttp3:okhttp package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-HM98634 OkHttp before 2

Security vulnerability affects the apache-hive package. OkHttp before 2...

CLEANSTART-2026-KK42580 flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value

Security vulnerability affects the spark-sc212-jdk17-py311 package. A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value...

PT-2026-108447

Security vulnerability affects the spark-sc212-jdk17-py311 package. A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value...

org.http4k:http4k-aws (2.18.0), org.http4k:http4k-client-apache (2.18.0) +13 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.18.0)

org.http4k:http4k-core MAVEN version 2.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.18.0 - org.http4k:http4k-client-apache 2.18.0 - org.http4k:http4k-client-okhttp 2.18.0 -...

org.http4k:http4k-aws (3.156.0), org.http4k:http4k-client-apache (3.156.0) +31 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.156.0)

org.http4k:http4k-core MAVEN version 3.156.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.156.0 - org.http4k:http4k-client-apache 3.156.0 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-client-apache (1.21.1), org.http4k:http4k-client-okhttp (1.21.1) +7 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.21.1)

org.http4k:http4k-core MAVEN version 1.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.21.1 - org.http4k:http4k-client-okhttp 1.21.1 - org.http4k:http4k-contract 1.21....

org.http4k:http4k-client-apache (1.23.0), org.http4k:http4k-client-okhttp (1.23.0) +8 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.23.0)

org.http4k:http4k-core MAVEN version 1.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.23.0 - org.http4k:http4k-client-okhttp 1.23.0 - org.http4k:http4k-contract 1.23....

org.http4k:http4k-aws (3.115.1), org.http4k:http4k-client-apache (3.115.1) +28 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.115.1)

org.http4k:http4k-core MAVEN version 3.115.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.115.1 - org.http4k:http4k-client-apache 3.115.1 - org.http4k:http4k-client-apache-async...

org.http4k:http4k-aws (3.26.0), org.http4k:http4k-client-apache (3.26.0) +25 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.26.0)

org.http4k:http4k-core MAVEN version 3.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.26.0 - org.http4k:http4k-client-apache 3.26.0 - org.http4k:http4k-client-apache-async 3.26...

org.http4k:http4k-aws (2.21.1), org.http4k:http4k-client-apache (2.21.1) +13 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.21.1)

org.http4k:http4k-core MAVEN version 2.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.21.1 - org.http4k:http4k-client-apache 2.21.1 - org.http4k:http4k-client-okhttp 2.21.1 -...

org.http4k:http4k-aws (2.24.0), org.http4k:http4k-client-apache (2.24.0) +13 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.24.0)

org.http4k:http4k-core MAVEN version 2.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.24.0 - org.http4k:http4k-client-apache 2.24.0 - org.http4k:http4k-client-okhttp 2.24.0 -...

org.http4k:http4k-aws (3.122.0), org.http4k:http4k-client-apache (3.122.0) +30 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.122.0)

org.http4k:http4k-core MAVEN version 3.122.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.122.0 - org.http4k:http4k-client-apache 3.122.0 - org.http4k:http4k-client-apache-async...