Threats affecting pkg:maven/OkHttp

OkHttp versions up to 5.5.1 have a vulnerability in the CertificatePinner component where improper certificate validation occurs. This flaw arises because Pin.matchesHostname does not normalize trailing-dot hostnames, allowing pin checks to be bypassed. An attacker with a CA-trusted certificate that does not match the configured pins can intercept or modify TLS traffic if the application requests the trailing-dot form of pinned hosts.