StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
okio-jvm@3.0.0
3.4.0

Open the chart page →

3,018
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
okio@1.17.2
1.17.6
reportportal/service-authorization:5.7.09e73114dbd15
okio@1.17.2
1.17.6
reportportal/service-jobs:5.7.2dc166c58485a
okio@1.17.2
1.17.6

Open the chart page →

25,737
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
okio@1.17.5
1.17.6
fonoster/routr-requester:2.13.6e0c823506eb2
okio@1.17.5
1.17.6

Open the chart page →

11,021
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

1,597
smartquerysearchhub0.1.01 of 1See more

smartquery searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
commerceexperts/smartquery-service:2.2.09e33ad89baf6
okio@2.8.0
3.4.0

Open the chart page →

1,528
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
okio@1.6.0
1.17.6

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
okio@1.17.2
1.17.6
apache/shenyu-bootstrap:2.5.11bd5756f6273
okio@1.17.2
1.17.6

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
okio@1.17.2
1.17.6

Open the chart page →

6,443
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
okio@1.15.0
1.17.6

Open the chart page →

6,949
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
okio@1.14.1
1.17.6

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
okio@1.11.0
1.17.6

Open the chart page →

13,079
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
okio@1.11.0
1.17.6

Open the chart page →

3,164
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
okio@1.12.0
1.17.6

Open the chart page →

11,841
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
okio@1.17.2
1.17.6

Open the chart page →

13,767
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
okio@1.17.2
1.17.6

Open the chart page →

18,756
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
okio@2.8.0
3.4.0

Open the chart page →

4,240
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
okio@2.8.0
3.4.0
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
okio@2.8.0
3.4.0
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
okio@2.8.0
3.4.0
thingsboard/tb-node:3.4.1645f43b688f7
okio@2.8.0
3.4.0

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okio@2.8.0
3.4.0

Open the chart page →

12,455
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
okio@2.8.0
3.4.0

Open the chart page →

9,397
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
okio@1.17.2
1.17.6

Open the chart page →

5,460
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
okio@1.13.0
1.17.6

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
okio@2.5.0
3.4.0

Open the chart page →

3,424
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
okio-jvm@3.0.0
3.4.0

Open the chart page →

6,016

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
thingsboard/tb-node:3.6.0f40a542832c4
okio@2.8.0
3.4.0
1
trinodb/trino:45038c6f24ab1a4
okio@1.17.5
1.17.6
1
trinodb/trino:405ee80ab5eeab2
okio@1.17.2
1.17.6
1
vitalii1992/account-service:latest0e694d94551d
okio-jvm@3.0.0
3.4.0
1
vitalii1992/analytics-service:latest8e798836ecea
okio-jvm@3.0.0
3.4.0
1
vitalii1992/api-gateway-service:latestaabe6ac39356
okio-jvm@3.0.0
3.4.0
1
vitalii1992/order-service:latest07c4a8833ce4
okio-jvm@3.0.0
3.4.0
1
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
okio-jvm@3.0.0
3.4.0
1
voltha/voltha-onos:5.1.8e038acb950d3
okio@1.14.0
1.17.6
1
vrijbrp/balie:developbc85c89530b9
okio@2.8.0
3.4.0
1
wavefronthq/proxy:9.2d1064d28f6eb
okio@1.13.0
1.17.6
1
wistefan/mvf:lateste0887302b2d8
okio@1.17.2
okio-jvm@3.0.0
1.17.6
3.4.0
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
okio@1.17.2
1.17.6
1
ghcr.io/fleeksoft/hbase/hbase-base:2.4.13.2c144bdd688d7
okio@1.6.0
1.17.6
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
okio@1.6.0
1.17.6
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
okio@2.8.0
3.4.0
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
okio@1.17.2
1.17.6
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
okio-jvm@3.0.0
3.4.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
okio@1.6.0
1.17.6
1
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
okio@1.15.0
1.17.6
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
okio@2.8.0
3.4.0
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
okio@2.8.0
3.4.0
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
okio@2.8.0
3.4.0
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
okio@2.8.0
3.4.0
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
okio@2.8.0
3.4.0
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
okio@1.17.2
1.17.6
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
okio@2.8.0
3.4.0
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
okio@2.4.1
3.4.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
okio-jvm@3.0.0
3.4.0
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
okio@1.13.0
1.17.6
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
okio@1.17.2
1.17.6
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
okio-jvm@3.0.0
3.4.0
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
okio@1.17.2
1.17.6
1
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
okio@1.11.0
1.17.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.