← Back to report

Investigate com.squareup.okhttp3:okhttp 3.12.13 — CVE-2021-0341

Build 26.5.8.20353 · Scan 2026-10-10T02:03:48.878Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

The app bundles a third-party library whose declared version matches a public security advisory (CVE). This is flagged from the version the library itself ships and a curated advisory list — confirm exploitability in your context and update the dependency to the fixed version. It is not a proof of live exploitation.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Component advisory match

Representative location

sbom:com.squareup.okhttp3:okhttp:CVE-2021-0341

Recorded match

CVE-2021-0341 (fixed in 4.9.2)

Detector rule

sbom

Recorded file locations

• sbom:com.squareup.okhttp3:okhttp:CVE-2021-0341