CVE-2023-3635

Publication date

2023-07-12 18:34:31

Family

JFROG

State

PUBLISHED

Description

GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer. This may lead to denial of service of the Okio client when handling a crafted GZIP archive, by using the GzipSource class.