StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
okio@1.13.0
1.17.6

Open the chart page →

8,063
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
okio@1.13.0
1.17.6

Open the chart page →

15,970
accountaccount-serviceVerified publisher0.4.21 of 1See more

account account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vitalii1992/account-service:latest0e694d94551d
okio-jvm@3.0.0
3.4.0

Open the chart page →

2,168
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
okio-jvm@3.0.0
3.4.0

Open the chart page →

2,326
gatewayaccount-serviceVerified publisher0.4.21 of 1See more

gateway account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vitalii1992/api-gateway-service:latestaabe6ac39356
okio-jvm@3.0.0
3.4.0

Open the chart page →

2,853
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
okio@1.17.5
1.17.6

Open the chart page →

7,713
orderaccount-serviceVerified publisher0.4.21 of 1See more

order account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vitalii1992/order-service:latest07c4a8833ce4
okio-jvm@3.0.0
3.4.0

Open the chart page →

2,221
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
okio-jvm@3.0.0
3.4.0

Open the chart page →

2,205
airbyte-cronairbyteVerified publisher0.40.371 of 1See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
airbyte/cron:0.40.17caf4f551c546
okio@1.17.5
okio-jvm@3.0.0
1.17.6
3.4.0

Open the chart page →

1,413
akto-central-setupakto1.1.101 of 5See more

akto-central-setup akto 1.1.10

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
okio@2.8.0
3.4.0

Open the chart page →

4,905
akto-dbabsakto0.1.91 of 1See more

akto-dbabs akto 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
okio@2.8.0
3.4.0

Open the chart page →

1,125
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
okio@2.8.0
3.4.0

Open the chart page →

5,489
mautrix-signalalexanderbadel0.1.11 of 2See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
signald/signald:0.18.20ffad7ccc2eb
okio-jvm@2.10.0
3.4.0

Open the chart page →

2,099
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
assistiot/automated_configuration:latest23f195a7a26a
okio@1.17.2
1.17.6
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

14,728
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
okio@1.17.5
1.17.6

Open the chart page →

13,352
sdn-controllerassist-iot-sdn-controller2.4.01 of 1See more

sdn-controller assist-iot-sdn-controller 2.4.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
assistiot/sdn_controller:2.4.0ea254b6d8a31
okio@1.14.0
1.17.6

Open the chart page →

7,936
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
okio-jvm@2.9.0
3.4.0

Open the chart page →

9,722
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
okio@2.8.0
3.4.0

Open the chart page →

13,459
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
okio@1.13.0
1.17.6

Open the chart page →

11,869
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
okio@1.17.2
1.17.6

Open the chart page →

8,001
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
okio@1.15.0
1.17.6

Open the chart page →

6,447
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
okio@1.13.0
1.17.6

Open the chart page →

7,226
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
okio@1.9.0
1.17.6

Open the chart page →

6,497
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
okio@1.12.0
1.17.6

Open the chart page →

23,665
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
okio@1.14.0
1.17.6

Open the chart page →

11,782
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
lightbend/spark-history-server:2.4.00bedf37f428a
okio@1.13.0
1.17.6

Open the chart page →

14,066
pulsarcnieg1.0.82 of 2See more

pulsar cnieg 1.0.8

2 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
okio@1.13.0
1.17.6
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
okio@1.13.0
1.17.6

Open the chart page →

16,860
cp-helm-chartscp-helm-charts0.6.15 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

5 of the 8 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
okio@1.13.0
1.17.6
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
okio@2.5.0
3.4.0
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
okio@1.13.0
1.17.6
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
okio@2.5.0
3.4.0
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
okio@2.5.0
3.4.0

Open the chart page →

58,857
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
okio@1.6.0
1.17.6

Open the chart page →

8,245
spark-standalonedmwm-bigdataVerified publisher0.1.01 of 2See more

spark-standalone dmwm-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gradiant/spark:2.4.4-python-alpine97657d56e927
okio@1.13.0
1.17.6

Open the chart page →

6,147
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
okio@1.14.0
1.17.6

Open the chart page →

11,782
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
okio-jvm@3.0.0
3.4.0

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
okio-jvm@3.0.0
3.4.0

Open the chart page →

6,915
spark-shuffleduyet0.2.01 of 1See more

spark-shuffle duyet 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
okio@1.13.0
1.17.6

Open the chart page →

5,639
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
okio@1.15.0
1.17.6

Open the chart page →

19,802
dshackledysnixVerified publisher0.1.11 of 2See more

dshackle dysnix 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.12ac2a4bc66ab6
okio@1.15.0
1.17.6

Open the chart page →

2,237
shenyuerdeng2.4.211 of 2See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
dshackleethereum-helm-chartsVerified publisher0.1.91 of 2See more

dshackle ethereum-helm-charts 0.1.9

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
emeraldpay/dshackle:0.14.0126f0ae0b388
okio@1.15.0
1.17.6

Open the chart page →

2,021
faucethethereum-helm-chartsVerified publisher0.2.41 of 1See more

fauceth ethereum-helm-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/komputing/fauceth:release4ab8fa4143b4
okio-jvm@3.0.0
3.4.0

Open the chart page →

1,373
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
okio@2.8.0
3.4.0

Open the chart page →

5,998
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
okio@2.4.1
3.4.0

Open the chart page →

8,528
mod-codex-ekbfolio-org0.1.341 of 1See more

mod-codex-ekb folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
folioci/mod-codex-ekb:latest235a3fa4adc9
okio@1.13.0
1.17.6

Open the chart page →

2,113
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
okio@1.13.0
1.17.6

Open the chart page →

6,988
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
okio@1.6.0
1.17.6
gchq/hdfs:3.3.35ec58edbb2db
okio@1.6.0
1.17.6

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
okio@1.6.0
1.17.6

Open the chart page →

9,342
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
okio@2.8.0
3.4.0

Open the chart page →

8,943
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
okio@1.17.2
1.17.6

Open the chart page →

17,702
promcordgeek-cookbookVerified publisher5.4.21 of 1See more

promcord geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
biospheere/promcord:latest16d4fd269e66
okio@1.17.2
1.17.6

Open the chart page →

1,147
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
okio@2.8.0
3.4.0

Open the chart page →

26,944
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
okio@3.2.0
3.4.0

Open the chart page →

4,921

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
okio@1.13.0
1.17.6
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
okio@2.5.0
3.4.0
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
okio@1.13.0
1.17.6
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
okio@2.5.0
3.4.0
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
okio@2.5.0
3.4.0
1
datappeal/hive-metastore:lateste38c085a3567
okio@1.6.0
1.17.6
1
dbanda/livy:0.80ca125e68e53
okio@1.6.0
1.17.6
1
dbanda/spark:2.4.6d0e6367876ae
okio@1.6.0
1.17.6
1
dellcloud/category:distributed02fc234353a9
okio@1.13.0
1.17.6
1
deltaio/delta-sharing-server:0.2.08b75118187c5
okio@1.6.0
1.17.6
1
dremio/dremio-oss:24.1.080ed2e3b7c43
okio@1.6.0
okio-jvm@3.0.0
1.17.6
3.4.0
1
drpcorg/dshackle:0.54.08858fae1859d
okio@1.15.0
1.17.6
1
easypi/openrefine:3.7.0d2950a36a576
okio-jvm@3.0.0
3.4.0
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
okio@1.6.0
1.17.6
1
emeraldpay/dshackle:0.14.0126f0ae0b388
okio@1.15.0
1.17.6
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
okio@1.15.0
1.17.6
1
expediagroup/pitchfork:1.314f2cf61e7de9
okio@1.17.2
1.17.6
1
farberg/apache-knox-docker:1.6.14b4a22487394
okio@1.6.0
1.17.6
1
folioci/mod-codex-ekb:latest235a3fa4adc9
okio@1.13.0
1.17.6
1
folioci/mod-marccat:latest1b57d690d568
okio@1.13.0
1.17.6
1
fonoster/routr:1.0.0-rc52ca65af17cbc
okio@1.13.0
1.17.6
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
okio@1.17.5
1.17.6
1
fonoster/routr-requester:2.13.6e0c823506eb2
okio@1.17.5
1.17.6
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
okio@1.15.0
1.17.6
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
okio@1.15.0
1.17.6
1
gchq/accumulo:2.0.1c460bb587d6d
okio@1.6.0
1.17.6
1
glasskube/operator:0.12.2be5133100d63
okio-jvm@3.0.0
3.4.0
1
gradiant/hdfs:3.2.2e3bf364fe713
okio@1.6.0
1.17.6
1
graviteeio/am-gateway:4.12.607b7f6dc267a
okio@1.17.2
1.17.6
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
okio@1.17.2
1.17.6
1
graylog2/server:2.4.3-38ff28c66e6c1
okio@1.13.0
1.17.6
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
okio@2.8.0
3.4.0
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
okio@2.8.0
3.4.0
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
okio@2.8.0
3.4.0
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
okio@2.8.0
3.4.0
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
okio@2.8.0
3.4.0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
okio@1.6.0
1.17.6
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
okio@1.15.0
1.17.6
1
housewrecker/gaps:latestf417dd0a7547
okio@2.8.0
3.4.0
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
okio@1.6.0
1.17.6
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
okio@1.17.2
1.17.6
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
okio@1.4.0
1.17.6
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
okio@1.8.0
1.17.6
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
okio@1.14.0
1.17.6
1
ibmcom/microclimate-theia:lateste17bdccc5030
okio@1.12.0
1.17.6
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
okio@1.17.2
1.17.6
1
keyfactor/signserver-ce:7.3.2798fbbe00283
okio@1.14.1
1.17.6
1
kubebb/gateway-api:v5.6.04d062f20309c
okio@2.8.0
3.4.0
1
kubebb/mesh-api:v5.7.0a3879931dfa1
okio-jvm@3.0.0
3.4.0
1
kyso/imagebox:latest68091eace89c
okio@1.12.0
1.17.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.