StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
okio-jvm@3.0.0
3.4.0

Open the chart page →

3,018
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
okio@1.17.2
1.17.6
reportportal/service-authorization:5.7.09e73114dbd15
okio@1.17.2
1.17.6
reportportal/service-jobs:5.7.2dc166c58485a
okio@1.17.2
1.17.6

Open the chart page →

25,737
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
okio@1.17.5
1.17.6
fonoster/routr-requester:2.13.6e0c823506eb2
okio@1.17.5
1.17.6

Open the chart page →

11,021
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

1,597
smartquerysearchhub0.1.01 of 1See more

smartquery searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
commerceexperts/smartquery-service:2.2.09e33ad89baf6
okio@2.8.0
3.4.0

Open the chart page →

1,528
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
okio@1.6.0
1.17.6

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
okio@1.17.2
1.17.6
apache/shenyu-bootstrap:2.5.11bd5756f6273
okio@1.17.2
1.17.6

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
okio@1.17.2
1.17.6

Open the chart page →

6,443
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
okio@1.15.0
1.17.6

Open the chart page →

6,949
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
okio@1.14.1
1.17.6

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
okio@1.11.0
1.17.6

Open the chart page →

13,079
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
okio@1.11.0
1.17.6

Open the chart page →

3,164
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
okio@1.12.0
1.17.6

Open the chart page →

11,841
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
okio@1.17.2
1.17.6

Open the chart page →

13,767
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
okio@1.17.2
1.17.6

Open the chart page →

18,756
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
okio@2.8.0
3.4.0

Open the chart page →

4,240
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
okio@2.8.0
3.4.0
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
okio@2.8.0
3.4.0
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
okio@2.8.0
3.4.0
thingsboard/tb-node:3.4.1645f43b688f7
okio@2.8.0
3.4.0

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okio@2.8.0
3.4.0

Open the chart page →

12,455
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
okio@2.8.0
3.4.0

Open the chart page →

9,397
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
okio@1.17.2
1.17.6

Open the chart page →

5,460
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
okio@1.13.0
1.17.6

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
okio@2.5.0
3.4.0

Open the chart page →

3,424
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
okio-jvm@3.0.0
3.4.0

Open the chart page →

6,016

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
okio@1.13.0
1.17.6
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
okio@2.5.0
3.4.0
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
okio@1.13.0
1.17.6
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
okio@2.5.0
3.4.0
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
okio@2.5.0
3.4.0
1
datappeal/hive-metastore:lateste38c085a3567
okio@1.6.0
1.17.6
1
dbanda/livy:0.80ca125e68e53
okio@1.6.0
1.17.6
1
dbanda/spark:2.4.6d0e6367876ae
okio@1.6.0
1.17.6
1
dellcloud/category:distributed02fc234353a9
okio@1.13.0
1.17.6
1
deltaio/delta-sharing-server:0.2.08b75118187c5
okio@1.6.0
1.17.6
1
dremio/dremio-oss:24.1.080ed2e3b7c43
okio@1.6.0
okio-jvm@3.0.0
1.17.6
3.4.0
1
drpcorg/dshackle:0.54.08858fae1859d
okio@1.15.0
1.17.6
1
easypi/openrefine:3.7.0d2950a36a576
okio-jvm@3.0.0
3.4.0
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
okio@1.6.0
1.17.6
1
emeraldpay/dshackle:0.14.0126f0ae0b388
okio@1.15.0
1.17.6
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
okio@1.15.0
1.17.6
1
expediagroup/pitchfork:1.314f2cf61e7de9
okio@1.17.2
1.17.6
1
farberg/apache-knox-docker:1.6.14b4a22487394
okio@1.6.0
1.17.6
1
folioci/mod-codex-ekb:latest235a3fa4adc9
okio@1.13.0
1.17.6
1
folioci/mod-marccat:latest1b57d690d568
okio@1.13.0
1.17.6
1
fonoster/routr:1.0.0-rc52ca65af17cbc
okio@1.13.0
1.17.6
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
okio@1.17.5
1.17.6
1
fonoster/routr-requester:2.13.6e0c823506eb2
okio@1.17.5
1.17.6
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
okio@1.15.0
1.17.6
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
okio@1.15.0
1.17.6
1
gchq/accumulo:2.0.1c460bb587d6d
okio@1.6.0
1.17.6
1
glasskube/operator:0.12.2be5133100d63
okio-jvm@3.0.0
3.4.0
1
gradiant/hdfs:3.2.2e3bf364fe713
okio@1.6.0
1.17.6
1
graviteeio/am-gateway:4.12.607b7f6dc267a
okio@1.17.2
1.17.6
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
okio@1.17.2
1.17.6
1
graylog2/server:2.4.3-38ff28c66e6c1
okio@1.13.0
1.17.6
1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
okio@2.8.0
3.4.0
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
okio@2.8.0
3.4.0
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
okio@2.8.0
3.4.0
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
okio@2.8.0
3.4.0
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
okio@2.8.0
3.4.0
1
hazelcast/hazelcast-jet:4.5.3a825ecbe9fda
okio@1.6.0
1.17.6
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
okio@1.15.0
1.17.6
1
housewrecker/gaps:latestf417dd0a7547
okio@2.8.0
3.4.0
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
okio@1.6.0
1.17.6
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
okio@1.17.2
1.17.6
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
okio@1.4.0
1.17.6
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
okio@1.8.0
1.17.6
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
okio@1.14.0
1.17.6
1
ibmcom/microclimate-theia:lateste17bdccc5030
okio@1.12.0
1.17.6
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
okio@1.17.2
1.17.6
1
keyfactor/signserver-ce:7.3.2798fbbe00283
okio@1.14.1
1.17.6
1
kubebb/gateway-api:v5.6.04d062f20309c
okio@2.8.0
3.4.0
1
kubebb/mesh-api:v5.7.0a3879931dfa1
okio-jvm@3.0.0
3.4.0
1
kyso/imagebox:latest68091eace89c
okio@1.12.0
1.17.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.