Approved changes feed: RSS · Atom

cpe:2.3:a:squareup:okhttp-brotli:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSquareup (e6d75cdb-57e9-57ad-b44b-f1909365e057)
ProductOkhttp Brotli (2e869b68-ad36-5f8e-b793-a9f40c3ac657)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/square/okhttp purl2cpe 2026-06-01 10:17:50.993871
pkg:maven/com.squareup.okhttp3/okhttp purl2cpe 2026-06-01 10:17:50.993874

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3782 vulnerable 2026-06-03 14:52:41.881280 DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response
MEDIUM (5.9)
DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response
Published: 2023-07-19T20:57:16.170Z
Updated: 2024-10-28T15:09:37.728Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.