Threats tagged 'ghsa-p22c-cv6w-qc6x'

OkHttp versions through 5.5.1 have a vulnerability in the CertificatePinner component where pin checks are skipped for hostnames with trailing dots due to improper normalization. This allows network attackers with a CA-trusted certificate that does not match the configured pins to intercept or modify TLS traffic when applications request the trailing-dot form of pinned hosts.