StackRadar

CVE-2021-0341

High

Advisory

Published 24 May 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
103
of 17,781 indexed, latest versions
Container images
114
deployed by those charts
Fix available
1 of 1
affected package

Square OkHttp can accept the wrong certificate

Carried by container images the latest versions of 103 of 17,781 indexed charts deploy, on 114 images.

Affected packageAffected versionsFixed inImages
okhttpmaven3.3.1, 3.4.1, 3.4.2, 3.5.0+22 more4.9.2114
OSV records
GHSA-3cqm-mf7h-prrj
Also known as
A-171980069, ASB-A-171980069

Charts affected

103 by stars
ChartLatestAffected imagesRadar Score
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2021-0341.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okhttp@3.14.9
4.9.2

Open the chart page →

12,455
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2021-0341.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
okhttp@3.13.1
4.9.2

Open the chart page →

5,460
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2021-0341.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
okhttp@3.9.0
4.9.2

Open the chart page →

28,605

Container images carrying it

114 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okhttp@3.14.4
4.9.2
3
selenium/hub:3.141.5902f251d48d5f
okhttp@3.11.0
4.9.2
3
gradiant/spark:2.4.4-python-alpine97657d56e927
okhttp@3.8.1
4.9.2
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
okhttp@3.14.9
4.9.2
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
okhttp@3.14.9
4.9.2
1
airbyte/cron:0.40.17caf4f551c546
okhttp@3.12.12
4.9.2
1
apache/druid:29.0.10cef139b6bf1
okhttp@3.12.12
4.9.2
1
apache/iotdb:0.13.3-nodeafa47bf1692a
okhttp@4.9.0
4.9.2
1
apache/nifi-registry:1.14.0090b7f87ec7f
okhttp@4.9.1
4.9.2
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
okhttp@3.14.9
4.9.2
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
okhttp@3.14.9
4.9.2
1
apachepulsar/pulsar:2.6.14db6ff0b4045
okhttp@3.9.0
4.9.2
1
apachepulsar/pulsar:3.0.79c9947de139d
okhttp@3.14.9
4.9.2
1
apachepulsar/pulsar:2.9.0d056c89b7131
okhttp@3.14.9
4.9.2
1
apachepulsar/pulsar:2.8.2d538416d5afe
okhttp@3.14.9
4.9.2
1
apache/rocketmq:4.9.35ac2a4e0f627
okhttp@4.9.0
4.9.2
1
apache/shenyu-admin:2.5.1e2be712fc4f4
okhttp@3.14.9
4.9.2
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
okhttp@3.14.9
4.9.2
1
apache/skywalking-oap-server:9.2.0133d35d2c263
okhttp@3.14.9
4.9.2
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
okhttp@3.9.0
4.9.2
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
okhttp@3.14.9
4.9.2
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okhttp@3.14.9
4.9.2
1
apimap/api:v1.8.11ae2b3ab00177
okhttp@4.3.1
4.9.2
1
assistiot/automated_configuration:latest23f195a7a26a
okhttp@3.14.2
4.9.2
1
assistiot/identity-manager_kc:latest0df4b4fa899a
okhttp@3.14.9
4.9.2
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
okhttp@3.12.12
4.9.2
1
atlassian/confluence-server:7.10.03b9222ab32ef
okhttp@3.11.0
4.9.2
1
atlassian/jira-software:8.14.037bc46cbec1a
okhttp@3.5.0
4.9.2
1
atlassian/jira-software:9.7.264a75aa4ec4e
okhttp@3.8.1
4.9.2
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
okhttp@3.14.6
4.9.2
1
biospheere/promcord:latest16d4fd269e66
okhttp@3.13.0
4.9.2
1
bivas/presto:0.19605545994f806
okhttp@3.9.0
4.9.2
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
okhttp@3.9.0
4.9.2
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
okhttp@3.9.0
4.9.2
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
okhttp@3.9.0
4.9.2
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
okhttp@3.9.0
4.9.2
1
dbanda/livy:0.80ca125e68e53
okhttp@3.12.0
4.9.2
1
dbanda/spark:2.4.6d0e6367876ae
okhttp@3.12.0
4.9.2
1
dellcloud/category:distributed02fc234353a9
okhttp@3.8.1
4.9.2
1
drpcorg/dshackle:0.54.08858fae1859d
okhttp@3.12.8
4.9.2
1
emeraldpay/dshackle:0.14.0126f0ae0b388
okhttp@3.12.8
4.9.2
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
okhttp@3.12.8
4.9.2
1
expediagroup/pitchfork:1.314f2cf61e7de9
okhttp@3.14.9
4.9.2
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
okhttp@3.12.0
4.9.2
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
okhttp@3.12.0
4.9.2
1
graviteeio/am-gateway:4.12.607b7f6dc267a
okhttp@3.14.9
4.9.2
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
okhttp@3.14.9
4.9.2
1
graylog2/server:2.4.3-38ff28c66e6c1
okhttp@3.9.0
4.9.2
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
okhttp@4.9.1
4.9.2
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
okhttp@4.9.1
4.9.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.