← Back to report

Investigate com.squareup.okhttp3:okhttp 4.8.0 — CVE-2021-0341

Build 2.0.2 · Scan 2026-09-15T07:37:05.233Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

The app bundles a third-party library whose declared version matches a public security advisory (CVE). This is flagged from the version the library itself ships and a curated advisory list — confirm exploitability in your context and update the dependency to the fixed version. It is not a proof of live exploitation.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Component advisory match

Representative location

sbom:com.squareup.okhttp3:okhttp:CVE-2021-0341

Recorded match

CVE-2021-0341 (fixed in 4.9.0)

Detector rule

sbom

Recorded file locations

• sbom:com.squareup.okhttp3:okhttp:CVE-2021-0341