| Package | Affected versions | Patched versions |
|---|---|---|
| com.squareup.okio:okio | ≥ 2.0.0-RC1, < 3.4.0< 1.17.6 | 3.4.01.17.6 |
| com.squareup.okio:okio-jvm | ≥ 2.0.0-RC1, < 3.4.0 | 3.4.0 |
| okio | ≥ 0.5.0, < 1.17.6≥ 2.0.0, < 3.4.0 | 1.17.63.4.0 |
GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free