StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
okio@1.17.5
1.17.6

Open the chart page →

7,713
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
okio@1.13.0
1.17.6

Open the chart page →

32,259
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
okio-jvm@3.0.0
3.4.0

Open the chart page →

11,933
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
okio@1.17.2
1.17.6

Open the chart page →

10,670
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0

Open the chart page →

6,328
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
okio@1.17.2
1.17.6

Open the chart page →

6,675
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
okio@1.15.0
1.17.6

Open the chart page →

7,857
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
okio@1.17.2
1.17.6

Open the chart page →

4,099
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
okio@1.6.0
1.17.6

Open the chart page →

5,357
sparkmicrosoft1.0.42 of 3See more

spark microsoft 1.0.4

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
okio@1.6.0
1.17.6
dbanda/spark:2.4.6d0e6367876ae
okio@1.6.0
1.17.6

Open the chart page →

13,738
spring-petclinic-cloudplatform9-communityVerified publisher0.2.04 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

4 of the 6 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
platform9community/api-gateway:latest40a4970de568
okio@1.17.2
1.17.6
platform9community/customers-service:latest2089811e5cc6
okio@1.17.2
1.17.6
platform9community/vets-service:latestd1165c94dfb3
okio@1.17.2
1.17.6
platform9community/visits-service:latest8d11b50368c6
okio@1.17.2
1.17.6

Open the chart page →

41,872
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
okio@1.14.0
1.17.6

Open the chart page →

11,782
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
okio@2.8.0
3.4.0

Open the chart page →

12,111
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
okio@1.13.0
okio-jvm@3.0.0
1.17.6
3.4.0

Open the chart page →

8,636
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
okio@1.6.0
1.17.6

Open the chart page →

7,930
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
okio@1.17.2
1.17.6

Open the chart page →

4,652
flinkriskfocus0.2.01 of 1See more

flink riskfocus 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/flink:1.11.2-scala_2.121fe4fb22a2a5
okio@1.12.0
1.17.6

Open the chart page →

3,235
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
okio@1.17.2
1.17.6
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
okio@1.17.2
1.17.6

Open the chart page →

8,698
hivebigdata-chartsVerified publisher0.1.81 of 1See more

hive bigdata-charts 0.1.8

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
okio@1.6.0
1.17.6

Open the chart page →

7,166
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
okio@1.6.0
1.17.6

Open the chart page →

7,948
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
okio-jvm@2.10.0
3.4.0

Open the chart page →

10,154
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
okio@2.8.0
3.4.0

Open the chart page →

9,154
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
okio@1.17.2
1.17.6

Open the chart page →

6,711
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
okio@1.6.0
1.17.6

Open the chart page →

7,335
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
okio@1.13.0
1.17.6

Open the chart page →

18,042
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
okio@2.8.0
3.4.0

Open the chart page →

7,901
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0

Open the chart page →

6,328
hive-metastoreslamdev0.0.51 of 2See more

hive-metastore slamdev 0.0.5

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
slamdev/apache-hive:2.3.9-2.10.1b4b029c9b15f
okio@1.6.0
1.17.6

Open the chart page →

8,198
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
okio@2.8.0
3.4.0

Open the chart page →

14,566
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
okio@2.8.0
3.4.0

Open the chart page →

8,811
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
okio@2.8.0
3.4.0

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
okio@1.6.0
1.17.6

Open the chart page →

17,896
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
okio@1.17.5
1.17.6

Open the chart page →

3,674
hadoopcloudnativeapp1.1.01 of 1See more

hadoop cloudnativeapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6

Open the chart page →

5,772
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
okio@1.17.2
1.17.6

Open the chart page →

8,752
pitchforkexpediagroup0.1.41 of 1See more

pitchfork expediagroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
expediagroup/pitchfork:1.314f2cf61e7de9
okio@1.17.2
1.17.6

Open the chart page →

3,309
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

15,562
amgraviteeioVerified publisher4.12.62 of 3See more

am graviteeio 4.12.6

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.607b7f6dc267a
okio@1.17.2
1.17.6
graviteeio/am-management-api:4.12.6a8eb04ee0c70
okio@1.17.2
1.17.6

Open the chart page →

2,088
stormgresearch1.2.01 of 3See more

storm gresearch 1.2.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/storm:2.4.0bd5d420506d6
okio@1.4.0
1.17.6

Open the chart page →

6,165
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
okio@2.8.0
3.4.0

Open the chart page →

12,019
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
okio@2.8.0
3.4.0

Open the chart page →

7,710
hadoopmiuler1.2.21 of 1See more

hadoop miuler 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6

Open the chart page →

5,772
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
okio-jvm@3.0.0
3.4.0

Open the chart page →

37,373
glowrootnovum-rgi-charts1.0.101 of 2See more

glowroot novum-rgi-charts 1.0.10

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
novumrgi/glowroot-central:0.14.0-beta.38c54790675b1
okio@1.14.0
1.17.6

Open the chart page →

2,308
nifi-registryprofyu1.14.0-r0011 of 1See more

nifi-registry profyu 1.14.0-r001

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/nifi-registry:1.14.0090b7f87ec7f
okio@2.8.0
3.4.0

Open the chart page →

4,621
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
okio@1.17.2
1.17.6

Open the chart page →

3,958
routrroutr0.0.101 of 2See more

routr routr 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
fonoster/routr:1.0.0-rc52ca65af17cbc
okio@1.13.0
1.17.6

Open the chart page →

4,983
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
okio@1.6.0
1.17.6
seldonio/cluster-manager:0.2.729e362bb1ba2
okio@1.6.0
1.17.6

Open the chart page →

13,798
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
okio@1.14.1
1.17.6

Open the chart page →

2,406
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
okio@2.8.0
3.4.0

Open the chart page →

13,486

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
thingsboard/tb-node:3.6.0f40a542832c4
okio@2.8.0
3.4.0
1
trinodb/trino:45038c6f24ab1a4
okio@1.17.5
1.17.6
1
trinodb/trino:405ee80ab5eeab2
okio@1.17.2
1.17.6
1
vitalii1992/account-service:latest0e694d94551d
okio-jvm@3.0.0
3.4.0
1
vitalii1992/analytics-service:latest8e798836ecea
okio-jvm@3.0.0
3.4.0
1
vitalii1992/api-gateway-service:latestaabe6ac39356
okio-jvm@3.0.0
3.4.0
1
vitalii1992/order-service:latest07c4a8833ce4
okio-jvm@3.0.0
3.4.0
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
okio-jvm@3.0.0
3.4.0
1
voltha/voltha-onos:5.1.8e038acb950d3
okio@1.14.0
1.17.6
1
vrijbrp/balie:developbc85c89530b9
okio@2.8.0
3.4.0
1
wavefronthq/proxy:9.2d1064d28f6eb
okio@1.13.0
1.17.6
1
wistefan/mvf:lateste0887302b2d8
okio@1.17.2
okio-jvm@3.0.0
1.17.6
3.4.0
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
okio@1.17.2
1.17.6
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
okio@1.6.0
1.17.6
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
okio@1.6.0
1.17.6
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
okio@2.8.0
3.4.0
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
okio@1.17.2
1.17.6
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
okio-jvm@3.0.0
3.4.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
okio@1.6.0
1.17.6
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
okio@1.15.0
1.17.6
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
okio@2.8.0
3.4.0
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
okio@2.8.0
3.4.0
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
okio@2.8.0
3.4.0
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
okio@2.8.0
3.4.0
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
okio@2.8.0
3.4.0
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
okio@1.17.2
1.17.6
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
okio@2.8.0
3.4.0
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
okio@2.4.1
3.4.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
okio-jvm@3.0.0
3.4.0
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
okio@1.13.0
1.17.6
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
okio@1.17.2
1.17.6
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
okio-jvm@3.0.0
3.4.0
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
okio@1.17.2
1.17.6
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
okio@1.11.0
1.17.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.