com.squareup.wire:wire-grpc-client (4.9.11), com.squareup.wire:wire-schema (4.9.11) +4 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.9.11)

com.squareup.wire:wire-runtime MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.11 - com.squareup.wire:wire-schema 4.9.11 -...

com.squareup.wire:wire-grpc-client (5.0.0-alpha01), com.squareup.wire:wire-schema (5.0.0-alpha01) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.0.0-alpha01)

com.squareup.wire:wire-runtime MAVEN version 5.0.0-alpha01 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 5.0.0-alpha01 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (5.0.0-alpha02), com.squareup.wire:wire-schema (5.0.0-alpha02) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.0.0-alpha02)

com.squareup.wire:wire-runtime MAVEN version 5.0.0-alpha02 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 5.0.0-alpha02 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (5.0.0-alpha04), com.squareup.wire:wire-schema (5.0.0-alpha04) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.0.0-alpha04)

com.squareup.wire:wire-runtime MAVEN version 5.0.0-alpha04 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 5.0.0-alpha04 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (5.3.4), com.squareup.wire:wire-schema (5.3.4) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.3.4)

com.squareup.wire:wire-runtime MAVEN version 5.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 5.3.4 - com.squareup.wire:wire-schema 5.3.4 -...

com.eulerstream:tiktok-live-proto (0.1.1), com.eulerstream:tiktok-live-proto-kotlin (0.1.1) +6 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.5.1)

com.squareup.wire:wire-runtime MAVEN version 5.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.eulerstream:tiktok-live-proto 0.1.1 - com.eulerstream:tiktok-live-proto-kotlin 0.1.1 -...

com.squareup.wire:wire-grpc-client (>=7.0.0-alpha01, <=7.0.0-alpha03), com.squareup.wire:wire-schema (>=7.0.0-alpha01, <=7.0.0-alpha03) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (>=7.0.0-alpha01, <=7.0.0-alpha03)

com.squareup.wire:wire-runtime MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha03 Source cves: CVE-2026-63126 Source advisory: OSV:GHSA-9RM7-3QHH-H2MC...

com.squareup.wire:wire-grpc-client (4.5.5), com.squareup.wire:wire-schema (4.5.5) +3 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.5.5)

com.squareup.wire:wire-runtime MAVEN version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.5 - com.squareup.wire:wire-schema 4.5.5 -...

com.squareup.wire:wire-grpc-client (>=7.0.0-alpha01, <=7.0.0-alpha03), com.squareup.wire:wire-schema (>=7.0.0-alpha01, <=7.0.0-alpha03) +1 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (>=7.0.0-alpha01, <=7.0.0-alpha03)

com.squareup.wire:wire-runtime MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha03 Source cves: CVE-2026-45799, CVE-2026-63126 Source advisory: GHSA-9RM7-3QHH-H2MC...

BIT-MONGODB-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

PT-2026-95072

Name of the Vulnerable Software and Affected Versions MongoDB Entity Framework Core Provider affected versions not specified Description Applications using this provider that combine independent encryption settings with the provider's own encryption settings may silently lose TLS Transport Layer...

CVE-2026-92756: Missing Encryption of Sensitive Data

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-27553

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

CVE-2026-27553 Information Disclosure via Schema Path Manipulation

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

CVE-2026-27553 Information Disclosure via Schema Path Manipulation

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

EUVD-2026-80236

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

CVE-2026-27553

CVE-2026-27553 affects a web application with a diagnostics tab endpoint (/index.php/diagnostics_tab/ajax_diag_table_rows). A low-privileged remote attacker holding a valid user cookie can manipulate the schema path parameter to achieve disclosure of all user password hashes . The CNA-assigned CV...

CVE-2026-82125

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not correctly verify the ownership or the moderation status of a comment before returning its content, allowing unauthenticated users to read the content of comments still awaiting moderation or marked as spam...

CVE-2026-82126

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password...

EUVD-2026-80189

The Schema & Structured Data for WP & AMP WordPress plugin before 1.66 does not check that a user is allowed to edit the specific post they request schema generation for, allowing users with the contributor role and above to obtain the content of other users' draft, pending, private and password...