# Vulnerability in OkHttp's Certificate Pinner

DevFeed: [Vulnerability in OkHttp's Certificate Pinner](<https://devfeed.tech/articles/vulnerability-in-okhttp-s-certificate-pinner-15950.md>)

Original publisher: [Read original article](<https://developer.squareup.com/blog/vulnerability-in-okhttps-certificate-pinner>)

Author: Square Engineering

Published: 2016-03-11T17:11:00Z

Content type: article

Language: en

Sources: [Square Corner Blog RSS Feed](<https://devfeed.tech/sources/square-corner-blog-rss-feed.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [bug](<https://devfeed.tech/topics/bug.md>), [Security](<https://devfeed.tech/topics/security.md>), [upgrade](<https://devfeed.tech/topics/upgrade.md>), [Bug Bounty](<https://devfeed.tech/topics/bugbounty.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [bounty](<https://devfeed.tech/tags/bounty.md>), [bug](<https://devfeed.tech/tags/bug.md>), [bug-bounty](<https://devfeed.tech/tags/bug-bounty.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [latest-release](<https://devfeed.tech/tags/latest-release.md>), [okhttp](<https://devfeed.tech/tags/okhttp.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [upgrade](<https://devfeed.tech/tags/upgrade.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>)

## AI overview

The article reports a vulnerability in OkHttp's CertificatePinner that could defeat certificate pinning. It says the issue was fixed in OkHttp 3.2.0 and backported to OkHttp 2.7.5, and recommends upgrading to the latest release.

## Source excerpt

We fixed a bug that could have been used to defeat certificate pinning