StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
okio-jvm@3.0.0
3.4.0

Open the chart page →

3,018
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
okio@1.17.2
1.17.6
reportportal/service-authorization:5.7.09e73114dbd15
okio@1.17.2
1.17.6
reportportal/service-jobs:5.7.2dc166c58485a
okio@1.17.2
1.17.6

Open the chart page →

25,737
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
okio@1.17.5
1.17.6
fonoster/routr-requester:2.13.6e0c823506eb2
okio@1.17.5
1.17.6

Open the chart page →

11,021
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

1,597
smartquerysearchhub0.1.01 of 1See more

smartquery searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
commerceexperts/smartquery-service:2.2.09e33ad89baf6
okio@2.8.0
3.4.0

Open the chart page →

1,528
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
okio@1.6.0
1.17.6

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
okio@1.17.2
1.17.6
apache/shenyu-bootstrap:2.5.11bd5756f6273
okio@1.17.2
1.17.6

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
okio@1.17.2
1.17.6

Open the chart page →

6,443
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
okio@1.15.0
1.17.6

Open the chart page →

6,949
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
okio@1.14.1
1.17.6

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
okio@1.11.0
1.17.6

Open the chart page →

13,079
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
okio@1.11.0
1.17.6

Open the chart page →

3,164
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
okio@1.12.0
1.17.6

Open the chart page →

11,841
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
okio@1.17.2
1.17.6

Open the chart page →

13,767
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
okio@1.17.2
1.17.6

Open the chart page →

18,756
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
okio@2.8.0
3.4.0

Open the chart page →

4,240
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
okio@2.8.0
3.4.0
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
okio@2.8.0
3.4.0
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
okio@2.8.0
3.4.0
thingsboard/tb-node:3.4.1645f43b688f7
okio@2.8.0
3.4.0

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okio@2.8.0
3.4.0

Open the chart page →

12,455
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
okio@2.8.0
3.4.0

Open the chart page →

9,397
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
okio@1.17.2
1.17.6

Open the chart page →

5,460
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
okio@1.13.0
1.17.6

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
okio@2.5.0
3.4.0

Open the chart page →

3,424
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
okio-jvm@3.0.0
3.4.0

Open the chart page →

6,016

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ladeit/ladeit:latest962b665ffe82
okio@1.15.0
1.17.6
1
lavandadelpatio/filebot:0.0.671f2ccec8c0d
okio@1.9.0
1.17.6
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
okio@1.9.0
1.17.6
1
library/flink:1.11.2-scala_2.121fe4fb22a2a5
okio@1.12.0
1.17.6
1
library/sonarqube:6.7.6-community0ae5169e3d0f
okio@1.12.0
1.17.6
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
okio@1.17.2
1.17.6
1
library/sonarqube:8.9.2-community88cd63154d4b
okio@1.17.2
1.17.6
1
library/sonarqube:8.2-communitya246bc64207e
okio@1.17.2
1.17.6
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
okio@1.17.2
1.17.6
1
library/sonarqube:8.9-communityeb2f0be32efd
okio@1.17.2
1.17.6
1
library/storm:2.4.0bd5d420506d6
okio@1.4.0
1.17.6
1
lightbend/spark-history-server:2.4.00bedf37f428a
okio@1.13.0
1.17.6
1
muluder/prograncontrollermcord:0.1.843b597a93da7
okio@1.4.0
1.17.6
1
ncsa/datawolf:4.7.0af6649d59150
okio-jvm@3.0.0
3.4.0
1
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
okio@1.14.0
1.17.6
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
okio@1.17.2
1.17.6
1
omecproject/onos-progran:1.0.05715e5648aa0
okio@1.4.0
1.17.6
1
onosproject/onos:2.2.144914a8d4b3f
okio@1.14.0
1.17.6
1
openwhisk/invoker:1.0.0f5831ec85525
okio@1.15.0
1.17.6
1
opsmx11/issuegen:v2.1.05c50ca123d88
okio@1.16.0
1.17.6
1
paulczar/spring-helloworld:latestc7140cecd5f7
okio@1.13.0
1.17.6
1
platform9community/api-gateway:latest40a4970de568
okio@1.17.2
1.17.6
1
platform9community/customers-service:latest2089811e5cc6
okio@1.17.2
1.17.6
1
platform9community/vets-service:latestd1165c94dfb3
okio@1.17.2
1.17.6
1
platform9community/visits-service:latest8d11b50368c6
okio@1.17.2
1.17.6
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
okio-jvm@2.9.0
3.4.0
1
radarbase/radar-push-endpoint:0.4.0e1758508e033
okio-jvm@3.0.0
3.4.0
1
raykrueger/riemann:0.2.14c8baf3de57bb
okio@1.9.0
1.17.6
1
refar/apm-api:v5.7.1241373fa2972
okio@1.17.2
1.17.6
1
refar/apm-operator-server:v5.7.1e5490f050f9f
okio@1.17.2
1.17.6
1
remche/shinyproxy:2.6.18bcda8a04d3b
okio@1.17.2
1.17.6
1
reportportal/service-api:5.7.29df41f8fb320
okio@1.17.2
1.17.6
1
reportportal/service-authorization:5.7.09e73114dbd15
okio@1.17.2
1.17.6
1
reportportal/service-jobs:5.7.2dc166c58485a
okio@1.17.2
1.17.6
1
rundeck/rundeck:3.2.74d64fe56f767
okio@1.15.0
1.17.6
1
rundeck/rundeck:3.0.16b13e8059ad72
okio@1.12.0
1.17.6
1
seldonio/apife:0.2.7ba81b17f00eb
okio@1.6.0
1.17.6
1
seldonio/apife:0.3.1eea0d3f578ca
okio@1.6.0
1.17.6
1
seldonio/cluster-manager:0.2.729e362bb1ba2
okio@1.6.0
1.17.6
1
signald/signald:0.18.20ffad7ccc2eb
okio-jvm@2.10.0
3.4.0
1
signald/signald:0.23.2edbff058278c
okio-jvm@3.2.0
3.4.0
1
sismics/docs:v1.10f4b0ef019cf1
okio@2.8.0
3.4.0
1
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
okio@1.6.0
1.17.6
1
snappydatainc/spark-shuffle:v2.2.0-kubernetes-0.5.1fd4b2070466f
okio@1.13.0
1.17.6
1
sslhep/hive-metastore:3.1.39e80af083079
okio@1.6.0
1.17.6
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
okio@1.17.2
1.17.6
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
okio@2.8.0
3.4.0
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
okio@2.8.0
3.4.0
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
okio@2.8.0
3.4.0
1
thingsboard/tb-node:3.4.1645f43b688f7
okio@2.8.0
3.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.