StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
okio@1.17.5
1.17.6

Open the chart page →

7,713
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
okio@1.13.0
1.17.6

Open the chart page →

32,259
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
okio-jvm@3.0.0
3.4.0

Open the chart page →

11,933
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
okio@1.17.2
1.17.6

Open the chart page →

10,670
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0

Open the chart page →

6,328
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
okio@1.17.2
1.17.6

Open the chart page →

6,675
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
okio@1.15.0
1.17.6

Open the chart page →

7,857
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
okio@1.17.2
1.17.6

Open the chart page →

4,099
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
okio@1.6.0
1.17.6

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
okio@1.6.0
1.17.6
dbanda/spark:2.4.6d0e6367876ae
okio@1.6.0
1.17.6

Open the chart page →

13,738
spring-petclinic-cloudplatform9-communityVerified publisher0.2.04 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

4 of the 6 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
platform9community/api-gateway:latest40a4970de568
okio@1.17.2
1.17.6
platform9community/customers-service:latest2089811e5cc6
okio@1.17.2
1.17.6
platform9community/vets-service:latestd1165c94dfb3
okio@1.17.2
1.17.6
platform9community/visits-service:latest8d11b50368c6
okio@1.17.2
1.17.6

Open the chart page →

41,872
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
okio@1.14.0
1.17.6

Open the chart page →

11,782
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
okio@2.8.0
3.4.0

Open the chart page →

12,111
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
okio@1.13.0
okio-jvm@3.0.0
1.17.6
3.4.0

Open the chart page →

8,636
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
okio@1.6.0
1.17.6

Open the chart page →

7,930
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
okio@1.17.2
1.17.6

Open the chart page →

4,652
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
okio@1.12.0
1.17.6

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
okio@1.17.2
1.17.6
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
okio@1.17.2
1.17.6

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
okio@1.6.0
1.17.6

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
okio@1.6.0
1.17.6

Open the chart page →

7,948
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
okio-jvm@2.10.0
3.4.0

Open the chart page →

10,154
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
okio@2.8.0
3.4.0

Open the chart page →

9,154
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
okio@1.17.2
1.17.6

Open the chart page →

6,711
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
okio@1.6.0
1.17.6

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
okio@1.13.0
1.17.6

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
okio@2.8.0
3.4.0

Open the chart page →

7,901
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0

Open the chart page →

6,328
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
okio@1.6.0
1.17.6

Open the chart page →

8,198
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
okio@2.8.0
3.4.0

Open the chart page →

14,566
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
okio@2.8.0
3.4.0

Open the chart page →

8,811
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
okio@2.8.0
3.4.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
okio@1.6.0
1.17.6

Open the chart page →

17,896
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
okio@1.17.5
1.17.6

Open the chart page →

3,674
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6

Open the chart page →

5,772
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
okio@1.17.2
1.17.6

Open the chart page →

8,752
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
okio@1.17.2
1.17.6

Open the chart page →

3,309
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

15,562
amgraviteeioVerified publisher4.12.62 of 3See more

am graviteeio 4.12.6

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.607b7f6dc267a
okio@1.17.2
1.17.6
graviteeio/am-management-api:4.12.6a8eb04ee0c70
okio@1.17.2
1.17.6

Open the chart page →

2,088
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
okio@1.4.0
1.17.6

Open the chart page →

6,165
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
okio@2.8.0
3.4.0

Open the chart page →

12,019
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
okio@2.8.0
3.4.0

Open the chart page →

7,710
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6

Open the chart page →

5,772
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
okio-jvm@3.0.0
3.4.0

Open the chart page →

37,373
glowrootnovum-rgi-charts1.0.101 of 2See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
okio@1.14.0
1.17.6

Open the chart page →

2,308
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
okio@2.8.0
3.4.0

Open the chart page →

4,621
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
okio@1.17.2
1.17.6

Open the chart page →

3,958
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
okio@1.13.0
1.17.6

Open the chart page →

4,983
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
okio@1.6.0
1.17.6
seldonio/cluster-manager:0.2.729e362bb1ba2
okio@1.6.0
1.17.6

Open the chart page →

13,798
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
okio@1.14.1
1.17.6

Open the chart page →

2,406
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
okio@2.8.0
3.4.0

Open the chart page →

13,486

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6
3
gchq/hdfs:3.3.35ec58edbb2db
okio@1.6.0
1.17.6
3
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0
3
selenium/hub:3.141.5902f251d48d5f
okio@1.14.0
1.17.6
3
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
okio@1.13.0
1.17.6
2
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0
2
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6
2
gradiant/spark:2.4.4-python-alpine97657d56e927
okio@1.13.0
1.17.6
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
okio@2.8.0
3.4.0
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
okio-jvm@3.0.0
3.4.0
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
okio@1.17.5
1.17.6
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
okio@1.17.2
1.17.6
1
5200710/hadoop:3.2.3-java8092d3088a5fb
okio@2.8.0
3.4.0
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
okio@1.6.0
1.17.6
1
airbyte/cron:0.40.17caf4f551c546
okio@1.17.5
okio-jvm@3.0.0
1.17.6
3.4.0
1
apache/drill:1.21.11f96558fd292
okio@2.8.0
3.4.0
1
apache/druid:29.0.10cef139b6bf1
okio@1.6.0
1.17.6
1
apache/hadoop:3af361b20bec0
okio@2.8.0
3.4.0
1
apache/iotdb:0.13.3-nodeafa47bf1692a
okio@2.8.0
3.4.0
1
apache/nifi-registry:1.14.0090b7f87ec7f
okio@2.8.0
3.4.0
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.6.14db6ff0b4045
okio@1.13.0
1.17.6
1
apachepulsar/pulsar:3.0.79c9947de139d
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.9.0d056c89b7131
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.8.2d538416d5afe
okio@1.13.0
1.17.6
1
apache/ranger:2.7.076c176e8a0e4
okio@2.8.0
3.4.0
1
apache/rocketmq:5.3.0434d8398f996
okio@3.2.0
3.4.0
1
apache/rocketmq:4.9.35ac2a4e0f627
okio@2.8.0
3.4.0
1
apache/shenyu-admin:2.5.1e2be712fc4f4
okio@1.17.2
1.17.6
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
okio@1.17.2
1.17.6
1
apache/skywalking-oap-server:9.2.0133d35d2c263
okio@1.17.2
1.17.6
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
okio@1.13.0
1.17.6
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
okio@1.17.2
1.17.6
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
okio@2.5.0
3.4.0
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okio@2.8.0
3.4.0
1
assistiot/automated_configuration:latest23f195a7a26a
okio@1.17.2
1.17.6
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
okio@1.6.0
1.17.6
1
assistiot/identity-manager_kc:latest0df4b4fa899a
okio@1.17.5
1.17.6
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
okio@1.14.0
1.17.6
1
atlassian/confluence-server:7.10.03b9222ab32ef
okio@1.14.1
1.17.6
1
atlassian/jira-software:8.14.037bc46cbec1a
okio@1.11.0
1.17.6
1
atlassian/jira-software:9.7.264a75aa4ec4e
okio@1.13.0
okio-jvm@3.0.0
1.17.6
3.4.0
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
okio-jvm@2.10.0
3.4.0
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
okio@1.17.2
1.17.6
1
biospheere/promcord:latest16d4fd269e66
okio@1.17.2
1.17.6
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
okio-jvm@3.0.0
3.4.0
1
bivas/presto:0.19605545994f806
okio@1.13.0
1.17.6
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
okio@1.17.5
1.17.6
1
commerceexperts/smartquery-service:2.2.09e33ad89baf6
okio@2.8.0
3.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.