CVE-2026-110975

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

EUVD-2026-109109

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975

A flaw in Kruize Autotune allows for datasources credential disclosure due to a lack of an authentication layer on its REST API. Specifically, the list-datasources (GET /datasources) and datasource-metadata endpoints serialize datasource objects using a default Gson configuration without a field-...

CVE-2026-110975

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

PT-2026-122154

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

Astra Linux – vulnerability in libgoogle-gson-java

Packages com.google.code.gson:gson prior to version 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

com.squareup.wire:wire-compiler (1.4.0), com.squareup.wire:wire-gson-support (1.4.0) +1 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (1.4.0)

com.squareup.wire:wire-runtime MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.4.0 - com.squareup.wire:wire-gson-support 1.4.0 -...

com.squareup.retrofit:converter-wire (>=1.7.0, <=1.9.0), com.squareup.wire:wire-compiler (1.5.2) +3 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (1.5.2)

com.squareup.wire:wire-runtime MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.7.0, =1.9.0 - com.squareup.wire:wire-compiler 1.5.2 -...

com.squareup.retrofit:converter-wire (>=1.2.1, <=1.2.2), com.squareup.wire:wire-compiler (1.0.1) +1 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (1.0.1)

com.squareup.wire:wire-runtime MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.2.1, =1.2.2 - com.squareup.wire:wire-compiler 1.0.1 -...

com.squareup.retrofit:converter-wire (1.6.1), com.squareup.wire:wire-compiler (1.5.1) +2 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (1.5.1)

com.squareup.wire:wire-runtime MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire 1.6.1 - com.squareup.wire:wire-compiler 1.5.1 -...

com.squareup.wire:wire-compiler (2.0.0-beta1), com.squareup.wire:wire-gson-support (2.0.0-beta1) +2 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (2.0.0-beta1)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta1 - com.squareup.wire:wire-gson-support 2.0.0-beta1...

com.squareup.retrofit:converter-wire (>=1.3.0, <=1.6.0), com.squareup.wire:wire-compiler (1.2.0) +1 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (1.2.0)

com.squareup.wire:wire-runtime MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.3.0, =1.6.0 - com.squareup.wire:wire-compiler 1.2.0 -...

com.squareup.wire:wire-compiler (1.3.3), com.squareup.wire:wire-gson-support (1.3.3) +1 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (1.3.3)

com.squareup.wire:wire-runtime MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.3 - com.squareup.wire:wire-gson-support 1.3.3 -...

com.squareup.wire:wire-compiler (2.0.0-beta9), com.squareup.wire:wire-gson-support (2.0.0-beta9) +4 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (2.0.0-beta9)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta9 - com.squareup.wire:wire-gson-support 2.0.0-beta9...

app.cash.backfila:client (0.1.3-20210127.1838-76ab4fc), app.cash.backfila:client-misk (0.1.3-20210127.1838-76ab4fc) +16 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (3.5.0)

com.squareup.wire:wire-runtime MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:client 0.1.3-20210127.1838-76ab4fc - app.cash.backfila:client-misk...

com.squareup.wire:wire-compiler (2.0.0-beta4), com.squareup.wire:wire-gson-support (2.0.0-beta4) +2 more potentially affected by CVE-2026-45799 +1 more via com.squareup.wire:wire-runtime (2.0.0-beta4)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta4 - com.squareup.wire:wire-gson-support 2.0.0-beta4...