StackRadar

CVE-2023-3635

Medium

Advisory

Published 12 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
175
of 17,781 indexed, latest versions
Container images
184
deployed by those charts
Fix available
2 of 2
affected packages

Okio Signed to Unsigned Conversion Error vulnerability

Carried by container images the latest versions of 175 of 17,781 indexed charts deploy, on 184 images.

Affected packageAffected versionsFixed inImages
okiomaven1.4.0, 1.6.0, 1.8.0, 1.9.0+14 more1.17.6, 3.4.0165
okio-jvmmaven2.9.0, 2.10.0, 3.0.0, 3.2.03.4.024
OSV records
GHSA-w33c-445m-f8w7

Charts affected

175 by stars
ChartLatestAffected imagesRadar Score
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
okio-jvm@3.0.0
3.4.0

Open the chart page →

3,018
reportportalreportportal5.7.23 of 8See more

reportportal reportportal 5.7.2

3 of the 8 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
okio@1.17.2
1.17.6
reportportal/service-authorization:5.7.09e73114dbd15
okio@1.17.2
1.17.6
reportportal/service-jobs:5.7.2dc166c58485a
okio@1.17.2
1.17.6

Open the chart page →

25,737
routr-connectroutr0.4.32 of 10See more

routr-connect routr 0.4.3

2 of the 10 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
fonoster/routr-edgeport:2.13.6d08a8a574a50
okio@1.17.5
1.17.6
fonoster/routr-requester:2.13.6e0c823506eb2
okio@1.17.5
1.17.6

Open the chart page →

11,021
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0

Open the chart page →

1,597
smartquerysearchhub0.1.01 of 1See more

smartquery searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
commerceexperts/smartquery-service:2.2.09e33ad89baf6
okio@2.8.0
3.4.0

Open the chart page →

1,528
seldon-core-oauth-gatewayseldon0.3.11 of 2See more

seldon-core-oauth-gateway seldon 0.3.1

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
seldonio/apife:0.3.1eea0d3f578ca
okio@1.6.0
1.17.6

Open the chart page →

8,098
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
okio@1.17.2
1.17.6
apache/shenyu-bootstrap:2.5.11bd5756f6273
okio@1.17.2
1.17.6

Open the chart page →

8,804
shenyushenyu-helm-chart-test2.4.271 of 2See more

shenyu shenyu-helm-chart-test 2.4.27

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
okio@1.17.2
1.17.6

Open the chart page →

6,443
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
okio@1.15.0
1.17.6

Open the chart page →

6,949
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
okio@1.14.1
1.17.6

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
okio@1.11.0
1.17.6

Open the chart page →

13,079
newrelic-private-minionsstarcher0.1.21 of 1See more

newrelic-private-minion sstarcher 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/newrelic/synthetics-minion:2.2.2198c26e1b8f70
okio@1.11.0
1.17.6

Open the chart page →

3,164
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
okio@1.12.0
1.17.6

Open the chart page →

11,841
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
okio@1.17.2
1.17.6

Open the chart page →

13,767
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
okio@1.17.2
1.17.6

Open the chart page →

18,756
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
okio@2.8.0
3.4.0

Open the chart page →

4,240
shenyutest-helm2.4.211 of 2See more

shenyu test-helm 2.4.21

1 of the 2 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6

Open the chart page →

12,513
thingsboardthingsboardVerified publisher0.1.34 of 12See more

thingsboard thingsboard 0.1.3

4 of the 12 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
okio@2.8.0
3.4.0
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
okio@2.8.0
3.4.0
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
okio@2.8.0
3.4.0
thingsboard/tb-node:3.4.1645f43b688f7
okio@2.8.0
3.4.0

Open the chart page →

25,394
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okio@2.8.0
3.4.0

Open the chart page →

12,455
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
okio@2.8.0
3.4.0

Open the chart page →

9,397
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
okio@1.17.2
1.17.6

Open the chart page →

5,460
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
okio@1.13.0
1.17.6

Open the chart page →

28,605
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
okio@2.5.0
3.4.0

Open the chart page →

3,424
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-3635.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
okio-jvm@3.0.0
3.4.0

Open the chart page →

6,016

Container images carrying it

184 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
okio@1.17.2
1.17.6
3
gchq/hdfs:3.3.35ec58edbb2db
okio@1.6.0
1.17.6
3
provectuslabs/kafka-ui:latest8f2ff02d64b0
okio@3.0.0
okio-jvm@3.0.0
3.4.0
3.4.0
3
selenium/hub:3.141.5902f251d48d5f
okio@1.14.0
1.17.6
3
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
okio@1.13.0
1.17.6
2
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
okio@3.2.0
3.4.0
2
danisla/hadoop:2.9.0255ba2dd739b
okio@1.4.0
1.17.6
2
gradiant/spark:2.4.4-python-alpine97657d56e927
okio@1.13.0
1.17.6
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
okio@2.8.0
3.4.0
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
okio-jvm@3.0.0
3.4.0
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
okio@1.17.5
1.17.6
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
okio@1.17.2
1.17.6
1
5200710/hadoop:3.2.3-java8092d3088a5fb
okio@2.8.0
3.4.0
1
5200710/hive:3.1.3-postgresql-metastoree34ab066d2ed
okio@1.6.0
1.17.6
1
airbyte/cron:0.40.17caf4f551c546
okio@1.17.5
okio-jvm@3.0.0
1.17.6
3.4.0
1
apache/drill:1.21.11f96558fd292
okio@2.8.0
3.4.0
1
apache/druid:29.0.10cef139b6bf1
okio@1.6.0
1.17.6
1
apache/hadoop:3af361b20bec0
okio@2.8.0
3.4.0
1
apache/iotdb:0.13.3-nodeafa47bf1692a
okio@2.8.0
3.4.0
1
apache/nifi-registry:1.14.0090b7f87ec7f
okio@2.8.0
3.4.0
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.6.14db6ff0b4045
okio@1.13.0
1.17.6
1
apachepulsar/pulsar:3.0.79c9947de139d
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.9.0d056c89b7131
okio@1.17.2
1.17.6
1
apachepulsar/pulsar:2.8.2d538416d5afe
okio@1.13.0
1.17.6
1
apache/ranger:2.7.076c176e8a0e4
okio@2.8.0
3.4.0
1
apache/rocketmq:5.3.0434d8398f996
okio@3.2.0
3.4.0
1
apache/rocketmq:4.9.35ac2a4e0f627
okio@2.8.0
3.4.0
1
apache/shenyu-admin:2.5.1e2be712fc4f4
okio@1.17.2
1.17.6
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
okio@1.17.2
1.17.6
1
apache/skywalking-oap-server:9.2.0133d35d2c263
okio@1.17.2
1.17.6
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
okio@1.13.0
1.17.6
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
okio@1.17.2
1.17.6
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
okio@2.5.0
3.4.0
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
okio@2.8.0
3.4.0
1
assistiot/automated_configuration:latest23f195a7a26a
okio@1.17.2
1.17.6
1
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
okio@1.6.0
1.17.6
1
assistiot/identity-manager_kc:latest0df4b4fa899a
okio@1.17.5
1.17.6
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
okio@1.14.0
1.17.6
1
atlassian/confluence-server:7.10.03b9222ab32ef
okio@1.14.1
1.17.6
1
atlassian/jira-software:8.14.037bc46cbec1a
okio@1.11.0
1.17.6
1
atlassian/jira-software:9.7.264a75aa4ec4e
okio@1.13.0
okio-jvm@3.0.0
1.17.6
3.4.0
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
okio-jvm@2.10.0
3.4.0
1
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
okio@1.17.2
1.17.6
1
biospheere/promcord:latest16d4fd269e66
okio@1.17.2
1.17.6
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
okio-jvm@3.0.0
3.4.0
1
bivas/presto:0.19605545994f806
okio@1.13.0
1.17.6
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
okio@1.17.5
1.17.6
1
commerceexperts/smartquery-service:2.2.09e33ad89baf6
okio@2.8.0
3.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.