Skip to content

Product

squareup okhttp3 vulnerabilities

1 published CVE affecting squareup okhttp3, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest squareup okhttp3 CVEs

Newest publication first

  1. CVE-2016-2402 Improper Certificate Validation in OkHttp

    Published
    MediumCVSS 5.9 EPSS 1.9%

    OkHttp before 2.7.4 and 3.x before 3.1.2 allows man-in-the-middle attackers to bypass certificate pinning by sending a certificate chain with a certificate from a non-pinned trusted CA and the pinned certificate.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.