StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
okio@1.17.5
1.17.6

Open the chart page →

7,713
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
okio@1.13.0
1.17.6

Open the chart page →

32,259
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
okio-jvm@3.0.0
3.4.0

Open the chart page →

11,933
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
okio@1.17.2
1.17.6

Open the chart page →

10,670
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0

Open the chart page →

6,328
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
okio@1.17.2
1.17.6

Open the chart page →

6,675
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
okio@1.15.0
1.17.6

Open the chart page →

7,857
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
okio@1.17.2
1.17.6

Open the chart page →

4,099
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
okio@1.6.0
1.17.6

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
okio@1.6.0
1.17.6
dbanda/spark:2.4.6d0e6367876ae
okio@1.6.0
1.17.6

Open the chart page →

13,738
spring-petclinic-cloudplatform9-communityVerified publisher0.2.04 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

4 of the 6 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
platform9community/api-gateway:latest40a4970de568
okio@1.17.2
1.17.6
platform9community/customers-service:latest2089811e5cc6
okio@1.17.2
1.17.6
platform9community/vets-service:latestd1165c94dfb3
okio@1.17.2
1.17.6
platform9community/visits-service:latest8d11b50368c6
okio@1.17.2
1.17.6

Open the chart page →

41,872
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
okio@1.14.0
1.17.6

Open the chart page →

11,782
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
okio@2.8.0
3.4.0

Open the chart page →

12,111
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
okio@1.13.0
okio-jvm@3.0.0
1.17.6
3.4.0

Open the chart page →

8,636
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
okio@1.6.0
1.17.6

Open the chart page →

7,930
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
okio@1.17.2
1.17.6

Open the chart page →

4,652
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
okio@1.12.0
1.17.6

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
okio@1.17.2
1.17.6
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
okio@1.17.2
1.17.6

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
okio@1.6.0
1.17.6

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
okio@1.6.0
1.17.6

Open the chart page →

7,948
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
okio-jvm@2.10.0
3.4.0

Open the chart page →

10,154
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
okio@2.8.0
3.4.0

Open the chart page →

9,154
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
okio@1.17.2
1.17.6

Open the chart page →

6,711
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
okio@1.6.0
1.17.6

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
okio@1.13.0
1.17.6

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
okio@2.8.0
3.4.0

Open the chart page →

7,901
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0

Open the chart page →

6,328
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
okio@1.6.0
1.17.6

Open the chart page →

8,198
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
okio@2.8.0
3.4.0

Open the chart page →

14,566
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
okio@2.8.0
3.4.0

Open the chart page →

8,811
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
okio@2.8.0
3.4.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
okio@1.6.0
1.17.6

Open the chart page →

17,896
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
okio@1.17.5
1.17.6

Open the chart page →

3,674
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6

Open the chart page →

5,772
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
okio@1.17.2
1.17.6

Open the chart page →

8,752
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
okio@1.17.2
1.17.6

Open the chart page →

3,309
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

15,562
amgraviteeioVerified publisher4.12.62 of 3See more

am graviteeio 4.12.6

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.607b7f6dc267a
okio@1.17.2
1.17.6
graviteeio/am-management-api:4.12.6a8eb04ee0c70
okio@1.17.2
1.17.6

Open the chart page →

2,088
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
okio@1.4.0
1.17.6

Open the chart page →

6,165
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
okio@2.8.0
3.4.0

Open the chart page →

12,019
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
okio@2.8.0
3.4.0

Open the chart page →

7,710
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6

Open the chart page →

5,772
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
okio-jvm@3.0.0
3.4.0

Open the chart page →

37,373
glowrootnovum-rgi-charts1.0.101 of 2See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
okio@1.14.0
1.17.6

Open the chart page →

2,308
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
okio@2.8.0
3.4.0

Open the chart page →

4,621
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
okio@1.17.2
1.17.6

Open the chart page →

3,958
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
okio@1.13.0
1.17.6

Open the chart page →

4,983
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
okio@1.6.0
1.17.6
seldonio/cluster-manager:0.2.729e362bb1ba2
okio@1.6.0
1.17.6

Open the chart page →

13,798
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
okio@1.14.1
1.17.6

Open the chart page →

2,406
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
okio@2.8.0
3.4.0

Open the chart page →

13,486

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
okio@1.13.0
1.17.6
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
okio@2.5.0
3.4.0
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
okio@1.13.0
1.17.6
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
okio@2.5.0
3.4.0
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
okio@2.5.0
3.4.0
1
datappeal/hive-metastore:lateste38c085a3567
okio@1.6.0
1.17.6
1
dbanda/livy:0.80ca125e68e53
okio@1.6.0
1.17.6
1
dbanda/spark:2.4.6d0e6367876ae
okio@1.6.0
1.17.6
1
dellcloud/category:distributed02fc234353a9
okio@1.13.0
1.17.6
1
deltaio/delta-sharing-server:0.2.08b75118187c5
okio@1.6.0
1.17.6
1
dremio/dremio-oss:24.1.080ed2e3b7c43
okio@1.6.0
okio-jvm@3.0.0
1.17.6
3.4.0
1
drpcorg/dshackle:0.54.08858fae1859d
okio@1.15.0
1.17.6
1
easypi/openrefine:3.7.0d2950a36a576
okio-jvm@3.0.0
3.4.0
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
okio@1.6.0
1.17.6
1
emeraldpay/dshackle:0.14.0126f0ae0b388
okio@1.15.0
1.17.6
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
okio@1.15.0
1.17.6
1
expediagroup/pitchfork:1.314f2cf61e7de9
okio@1.17.2
1.17.6
1
farberg/apache-knox-docker:1.6.14b4a22487394
okio@1.6.0
1.17.6
1
folioci/mod-codex-ekb:latest235a3fa4adc9
okio@1.13.0
1.17.6
1
folioci/mod-marccat:latest1b57d690d568
okio@1.13.0
1.17.6
1
fonoster/routr:1.0.0-rc52ca65af17cbc
okio@1.13.0
1.17.6
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
okio@1.17.5
1.17.6
1
fonoster/routr-requester:2.13.6e0c823506eb2
okio@1.17.5
1.17.6
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
okio@1.15.0
1.17.6
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
okio@1.15.0
1.17.6
1
gchq/accumulo:2.0.1c460bb587d6d
okio@1.6.0
1.17.6
1
glasskube/operator:0.12.2be5133100d63
okio-jvm@3.0.0
3.4.0
1
gradiant/hdfs:3.2.2e3bf364fe713
okio@1.6.0
1.17.6
1
graviteeio/am-gateway:4.12.607b7f6dc267a
okio@1.17.2
1.17.6
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
okio@1.17.2
1.17.6
1
graylog2/server:2.4.3-38ff28c66e6c1
okio@1.13.0
1.17.6
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
okio@2.8.0
3.4.0
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
okio@2.8.0
3.4.0
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
okio@2.8.0
3.4.0
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
okio@2.8.0
3.4.0
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
okio@2.8.0
3.4.0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
okio@1.6.0
1.17.6
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
okio@1.15.0
1.17.6
1
housewrecker/gaps:latestf417dd0a7547
okio@2.8.0
3.4.0
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
okio@1.6.0
1.17.6
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
okio@1.17.2
1.17.6
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
okio@1.4.0
1.17.6
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
okio@1.8.0
1.17.6
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
okio@1.14.0
1.17.6
1
ibmcom/microclimate-theia:lateste17bdccc5030
okio@1.12.0
1.17.6
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
okio@1.17.2
1.17.6
1
keyfactor/signserver-ce:7.3.2798fbbe00283
okio@1.14.1
1.17.6
1
kubebb/gateway-api:v5.6.04d062f20309c
okio@2.8.0
3.4.0
1
kubebb/mesh-api:v5.7.0a3879931dfa1
okio-jvm@3.0.0
3.4.0
1
kyso/imagebox:latest68091eace89c
okio@1.12.0
1.17.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.