app.myoss.cloud.boot:myoss-starter-web (>=2.1.0.release, <=2.1.6.release), app.myoss.cloud.boot:myoss-starter-webflux (>=2.1.4.release, <=2.1.6.release) +1049 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.8.1)

com.squareup.okhttp3:okhttp MAVEN version 3.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - app.myoss.cloud.boot:myoss-starter-web =2.1.0.release, =2.1.4.release, =2.1.4.release, =2.1.0.release,...

ai.berktest:berkclient (>=1.0.0, <=1.0.3), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +1962 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.11.0)

com.squareup.okhttp3:okhttp MAVEN version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.berktest:berkclient =1.0.0, =1.7, =2.0.3.release, =2.0.2.release, =1.0.3.release, =3.1.4, =3.1.4,...

at.stefangeyer.challonge.rest:retrofit (>=2.0, <=2.1.0), br.com.luisrjaeger:airwatch-publishing (>=0.0.61, <=0.1.1) +1018 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.0)

com.squareup.okhttp3:okhttp MAVEN version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - at.stefangeyer.challonge.rest:retrofit =2.0, =0.0.61, =0.1.0, =0.0.1, =1.17.0, =1.0.0-beta, =1.3.1,...

au.com.titanclass:reactive-streams-telemetry_2.12 (>=1.0.0, <=1.0.1), ch.mollusca.glassfish.http.deployer:ch.mollusca.glassfish.http.deployer.gradle.plugin (>=0.2.0, <=0.3.0) +626 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.9.0)

com.squareup.okhttp3:okhttp MAVEN version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - au.com.titanclass:reactive-streams-telemetry2.12 =1.0.0, =0.2.0, =0.1.0-beta, =0.0.1-beta, =0.0.3-beta,...

at.willhaben.willtest:browserstack (>=1.2.5, <=1.3.0), at.willhaben.willtest:core (>=1.2.5, <=1.3.0) +815 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.9.1)

com.squareup.okhttp3:okhttp MAVEN version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - at.willhaben.willtest:browserstack =1.2.5, =1.2.5, =1.2.5, =1.0.22, =18.3.0, =2.23.5, =1.0.4-release,...

ai.h2o:h2o-bindings (>=3.24.0.1, <=3.30.0.3), ai.idylnlp:idylnlp-dl4j (>=1.0.0, <=1.1.0) +1030 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.10.0)

com.squareup.okhttp3:okhttp MAVEN version 3.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.h2o:h2o-bindings =3.24.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

cn.leancloud:engine-core (>=5.0.9, <=5.0.26), cn.leancloud:realtime-core (>=5.0.9, <=5.0.26) +424 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.1)

com.squareup.okhttp3:okhttp MAVEN version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cn.leancloud:engine-core =5.0.9, =5.0.9, =5.0.8, =5.0.9, =1.0.release, =0.1.0, =0.1.0, =2.3.1, =2.4.0,...

com.airbnb.okreplay:junit (>=1.5.0, <=1.6.0), com.airbnb.okreplay:noop (>=1.5.0, <=1.6.0) +257 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.2)

com.squareup.okhttp3:okhttp MAVEN version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.airbnb.okreplay:junit =1.5.0, =1.5.0, =1.5.0, =1.0.0.release, =1.3.0, =1.2.0, =1.0.0, =1.0.0,...

com.ashokvarma.android:gander-no-op (>=2.0.3, <=3.1.0), com.chimerapps:mqtt-java (0.2.0) +182 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.3)

com.squareup.okhttp3:okhttp MAVEN version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.ashokvarma.android:gander-no-op =2.0.3, =0.1.2, =0.0.17, =0.0.1, =0.1.2, =0.1.1, =0.1.1, =1.0, =1.1,...

com.squareup.okhttp3.sample:crawler (3.12.4), com.squareup.okhttp3.sample:guide (3.12.4) +15 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.4)

com.squareup.okhttp3:okhttp MAVEN version 3.12.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.squareup.okhttp3.sample:crawler 3.12.4 - com.squareup.okhttp3.sample:guide 3.12.4 -...

com.squareup.okhttp3.sample:crawler (3.12.9), com.squareup.okhttp3.sample:guide (3.12.9) +15 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.9)

com.squareup.okhttp3:okhttp MAVEN version 3.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.squareup.okhttp3.sample:crawler 3.12.9 - com.squareup.okhttp3.sample:guide 3.12.9 -...

br.com.guiabolso:events-client (>=5.0.5, <=5.1.1), br.com.guiabolso:events-core (>=5.0.5, <=5.1.1) +45 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.10)

com.squareup.okhttp3:okhttp MAVEN version 3.12.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - br.com.guiabolso:events-client =5.0.5, =5.0.5, =5.0.5, =5.0.5, =5.0.5, =5.0.5, =3.0.1, =3.0.1, =3.0.1,...

cn.renlm.plugins:my-plugin (>=2.2.1, <=2.4.2), cn.renlm.plugins:mycrawler (>=2.2.1, <=2.4.2) +53 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.8)

com.squareup.okhttp3:okhttp MAVEN version 3.12.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cn.renlm.plugins:my-plugin =2.2.1, =2.2.1, =5.0.2011, =0.43.0, =0.1.0, =0.5.0, =0.2, =1.0.0, =0.0.4, =0....

com.github.antennaesdk.server:mms (0.1.6), com.github.seratch:jslack (>=0.1.5, <=1.0.0) +13 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.4.0)

com.squareup.okhttp3:okhttp MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.github.antennaesdk.server:mms 0.1.6 - com.github.seratch:jslack =0.1.5, =1.0.0 -...

ai.h2o:h2o-bindings (>=3.8.3.1, <=3.22.1.6), br.com.thiagomoreira.foursquare:foursquare4j (1.0.0) +238 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.3.1)

com.squareup.okhttp3:okhttp MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.h2o:h2o-bindings =3.8.3.1, =1.0.0, =1.0.4, =1.0, =0.1.6, =1.0.0, =3.2.11, =1.1.0, =1.0.0, =1.0.0, =1.8...

ai.cochl:sense-api (v0.0.1), ai.h2o:h2o-bindings (>=3.30.0.4, <=3.46.0.12) +4781 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (>=4.0.0-alpha01, <=4.9.1)

com.squareup.okhttp3:okhttp MAVEN version =4.0.0-alpha01, =3.30.0.4, =5.0.0, =5.0.0, =1.0.4, =1.0.0, =2.1.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.3, =19.9.0, =19.9.1, =21.9.3 and more Source cves: CVE-2021-0341 Source advisory: SNYK:JAVA-COMSQUAREUPOKHTTP3-13961111...

ai.cochl:sense-api (v0.0.1), ai.h2o:h2o-bindings (>=3.30.0.4, <=3.46.0.12) +4781 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (>=4.0.0-alpha01, <=4.9.1)

com.squareup.okhttp3:okhttp MAVEN version =4.0.0-alpha01, =3.30.0.4, =5.0.0, =5.0.0, =1.0.4, =1.0.0, =2.1.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.3, =19.9.0, =19.9.1, =21.9.3 and more Source cves: CVE-2021-0341 Source advisory: GHSA-3CQM-MF7H-PRRJ...

Improper Certificate Validation

Overview com.squareup.okhttp3:okhttp is a HTTP & HTTP/2 client for Android and Java applications Affected versions of this package are vulnerable to Improper Certificate Validation via the verifyHostName function in OkHostnameVerifier.java. An attacker can gain unauthorized access to sensitive...

com.github.bumptech.glide:okhttp3-integration (1.5.0), com.squareup.okhttp3.sample:crawler (3.1.0) +12 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.1.0)

com.squareup.okhttp3:okhttp MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.github.bumptech.glide:okhttp3-integration 1.5.0 - com.squareup.okhttp3.sample:crawler 3.1.0 -...

Improper Certificate Validation in OkHttp

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate...