CVE-2023-3635 (published 2023-07-12T18:34:31.609Z)
GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.


Affected products: Versions: 0.5.0, 1.0.0, 2.0.0, 3.0.0