ca.vanzyl.concord.ck8s:ck8s-cli (2.0.5), ca.vanzyl.concord.ck8s:ck8s-client (>=2.0.5, <=3.0.1) +236 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.1)

com.squareup.okhttp3:okhttp MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ca.vanzyl.concord.ck8s:ck8s-cli 2.0.5 - ca.vanzyl.concord.ck8s:ck8s-client =2.0.5, =2.0.4, =2.0.4, =0.0....

au.org.consumerdatastandards:client (>=0.9.6, <=1.0.0-rc5), au.org.consumerdatastandards:client-cli (>=0.9.6, <=1.0.0-rc5) +841 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.2)

com.squareup.okhttp3:okhttp MAVEN version 3.14.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - au.org.consumerdatastandards:client =0.9.6, =0.9.6, =1.0.0-m11, =0.0.1-m8, =1.0.0-m6, =0.0.1-m15,...

ai.nextbillion:nb-maps-client (>=0.6.0a, <=1.7.1), au.org.consumerdatastandards:client (>=1.0.0-rc6, <=2.4.1) +859 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.4)

com.squareup.okhttp3:okhttp MAVEN version 3.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.nextbillion:nb-maps-client =0.6.0a, =1.0.0-rc6, =1.0.0-rc6, =1.2.0, =1.0.2, =1.0.0, =1.0.0, =5.7.1,...

com.nylas.sdk:nylas (>=2.0.0-beta.1, <=2.11.1), com.nylas.sdk:nylas-java-sdk (>=0.1.0, <=1.22.0) +21 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.5)

com.squareup.okhttp3:okhttp MAVEN version 3.14.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.nylas.sdk:nylas =2.0.0-beta.1, =0.1.0, =1.22.0 - com.squareup.okhttp3.sample:crawler 3.14.5 -...

club.pizzalord:galadriel (>=0.0.1, <=0.0.9), club.pizzalord:galadriel-authority (>=0.0.1, <=0.0.9) +334 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.6)

com.squareup.okhttp3:okhttp MAVEN version 3.14.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - club.pizzalord:galadriel =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.5, =0.0.1, =0.0.1, =0.0.1, =0.0.2, =0.0.14...

ai.databand:dbnd-agent (>=0.80.7, <=0.82.5), ai.databand:dbnd-api-deequ (>=0.80.7, <=0.82.5) +5842 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.9)

com.squareup.okhttp3:okhttp MAVEN version 3.14.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.databand:dbnd-agent =0.80.7, =0.80.7, =0.80.7, =0.80.7, =0.0.3, =1.0.2, =0.0.0.2-alpha, =1.0.0-beta03...

com.squareup.okhttp3.sample:crawler (3.12.7), com.squareup.okhttp3.sample:guide (3.12.7) +19 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.7)

com.squareup.okhttp3:okhttp MAVEN version 3.12.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.squareup.okhttp3.sample:crawler 3.12.7 - com.squareup.okhttp3.sample:guide 3.12.7 -...

br.com.guiabolso:events-client (>=5.0.5, <=5.1.1), br.com.guiabolso:events-core (>=5.0.5, <=5.1.1) +45 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.10)

com.squareup.okhttp3:okhttp MAVEN version 3.12.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - br.com.guiabolso:events-client =5.0.5, =5.0.5, =5.0.5, =5.0.5, =5.0.5, =5.0.5, =3.0.1, =3.0.1, =3.0.1,...

ai.ancf.lmos:lmos-operator (>=0.5.0, <=0.6.0), ai.h2o:sparkling-water-core_2.12 (>=3.32.1.2-1-3.1, <=3.36.0.2-1-3.1) +910 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.12)

com.squareup.okhttp3:okhttp MAVEN version 3.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.ancf.lmos:lmos-operator =0.5.0, =3.32.1.2-1-3.1, =3.34.0.3-1-3.1, =3.34.0.3-1-3.1, =3.34.0.3-1-3.1,...

cloud.topcode.open:topcode-base-pay (>=1.0.1, <=1.0.1.1), cn.6xyun.android:http (>=0.2.22, <=0.2.23) +1392 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.13)

com.squareup.okhttp3:okhttp MAVEN version 3.12.13 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cloud.topcode.open:topcode-base-pay =1.0.1, =0.2.22, =1.1.8, =3.1.1, =3.8.1, =3.1.1, =1.9.1, =1.8.1,...

ai.nextbillion:nbmap-sdk-api (>=0.1.0, <=0.1.2), ai.nextbillion:nbmap-sdk-core (>=0.1.0, <=0.1.2) +1022 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.7)

com.squareup.okhttp3:okhttp MAVEN version 3.14.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - ai.nextbillion:nbmap-sdk-api =0.1.0, =0.1.0, =1.2.0-alpha04, =1.2.0-alpha04, =1.5.0-rc4, =1.0, =1.0.0,...

com.9ls:nest-api-jdk (0.0.2), com.aliyun.schedulerx:schedulerx2-spring-boot-starter (>=1.3.4, <=1.9.0) +199 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.8)

com.squareup.okhttp3:okhttp MAVEN version 3.14.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.9ls:nest-api-jdk 0.0.2 - com.aliyun.schedulerx:schedulerx2-spring-boot-starter =1.3.4, =1.1.1, =0.4....

ai.cochl:sense-api (v0.0.1), ai.h2o:h2o-bindings (>=3.30.0.4, <=3.46.0.12) +4781 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (>=4.0.0-alpha01, <=4.9.1)

com.squareup.okhttp3:okhttp MAVEN version =4.0.0-alpha01, =3.30.0.4, =5.0.0, =5.0.0, =1.0.4, =1.0.0, =2.1.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.3, =19.9.0, =19.9.1, =21.9.3 and more Source cves: CVE-2021-0341 Source advisory: OSV:GHSA-3CQM-MF7H-PRRJ...

ai.cochl:sense-api (v0.0.1), ai.h2o:h2o-bindings (>=3.30.0.4, <=3.46.0.12) +4781 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (>=4.0.0-alpha01, <=4.9.1)

com.squareup.okhttp3:okhttp MAVEN version =4.0.0-alpha01, =3.30.0.4, =5.0.0, =5.0.0, =1.0.4, =1.0.0, =2.1.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.3, =19.9.0, =19.9.1, =21.9.3 and more Source cves: CVE-2021-0341 Source advisory: SNYK:JAVA-COMSQUAREUPOKHTTP3-13961111...

ai.cochl:sense-api (v0.0.1), ai.h2o:h2o-bindings (>=3.30.0.4, <=3.46.0.12) +4781 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (>=4.0.0-alpha01, <=4.9.1)

com.squareup.okhttp3:okhttp MAVEN version =4.0.0-alpha01, =3.30.0.4, =5.0.0, =5.0.0, =1.0.4, =1.0.0, =2.1.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.0, =19.9.3, =19.9.0, =19.9.1, =21.9.3 and more Source cves: CVE-2021-0341 Source advisory: GHSA-3CQM-MF7H-PRRJ...

cn.hydrz:dipper-map (>=1.0.0, <=1.0.1), cn.xphsc.boot:kubernetes-spring-boot-starer (1.0.0-rc) +170 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.14.3)

com.squareup.okhttp3:okhttp MAVEN version 3.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - cn.hydrz:dipper-map =1.0.0, =2.7.1.5, =2.0.0-beta2, =0.0.1, =1.0.0, =2.3.0-beta, =2.0.0, =2.0.0, =2.1.0,...

GHSA-3CQM-MF7H-PRRJ Square OkHttp can accept the wrong certificate

In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Improper Certificate Validation

Overview com.squareup.okhttp3:okhttp is a HTTP & HTTP/2 client for Android and Java applications Affected versions of this package are vulnerable to Improper Certificate Validation via the verifyHostName function in OkHostnameVerifier.java. An attacker can gain unauthorized access to sensitive...

com.squareup.okhttp3.sample:crawler (3.12.9), com.squareup.okhttp3.sample:guide (3.12.9) +15 more potentially affected by CVE-2021-0341 via com.squareup.okhttp3:okhttp (3.12.9)

com.squareup.okhttp3:okhttp MAVEN version 3.12.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okhttp3:okhttp and may be impacted: - com.squareup.okhttp3.sample:crawler 3.12.9 - com.squareup.okhttp3.sample:guide 3.12.9 -...

Improper Certificate Validation in OkHttp

OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate...