com.squareup.retrofit:converter-wire (>=2.0.0-beta1, <=2.0.0-beta2), com.squareup.wire:wire-compiler (1.7.0) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.7.0)

com.squareup.wire:wire-runtime MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =2.0.0-beta1, =2.0.0-beta2 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-compiler (1.3.0), com.squareup.wire:wire-gson-support (1.3.0) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.0)

com.squareup.wire:wire-runtime MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.0 - com.squareup.wire:wire-gson-support 1.3.0 -...

com.squareup.wire:wire-compiler (1.6.1), com.squareup.wire:wire-gson-support (1.6.1) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.6.1)

com.squareup.wire:wire-runtime MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.6.1 - com.squareup.wire:wire-gson-support 1.6.1 -...

com.squareup.wire:wire-compiler (2.0.0-beta9), com.squareup.wire:wire-gson-support (2.0.0-beta9) +4 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta9)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta9 - com.squareup.wire:wire-gson-support 2.0.0-beta9...

com.squareup.wire:wire-compiler (2.0.0-beta1), com.squareup.wire:wire-gson-support (2.0.0-beta1) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta1)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta1 - com.squareup.wire:wire-gson-support 2.0.0-beta1...

com.squareup.wire:wire-compiler (2.0.0-beta8), com.squareup.wire:wire-gson-support (2.0.0-beta8) +4 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta8)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta8 - com.squareup.wire:wire-gson-support 2.0.0-beta8...

com.squareup.wire:wire-compiler (2.0.0-beta10), com.squareup.wire:wire-gson-support (2.0.0-beta10) +4 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta10)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta10 - com.squareup.wire:wire-gson-support...

com.squareup.wire:wire-compiler (2.0.0-beta2), com.squareup.wire:wire-gson-support (2.0.0-beta2) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta2)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta2 - com.squareup.wire:wire-gson-support 2.0.0-beta2...

com.squareup.wire:wire-compiler (2.0.0-beta7), com.squareup.wire:wire-gson-support (2.0.0-beta7) +3 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta7)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta7 - com.squareup.wire:wire-gson-support 2.0.0-beta7...

com.squareup.wire:wire-compiler (1.3.3), com.squareup.wire:wire-gson-support (1.3.3) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.3)

com.squareup.wire:wire-runtime MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.3 - com.squareup.wire:wire-gson-support 1.3.3 -...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.3.1) +5 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=6.0.0, <=6.3.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2026-74761 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19653597...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.3.1) +5 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=6.0.0, <=6.3.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2026-74761 Source advisory: MEND:CVE-2026-74761...

org.acegisecurity:acegi-security-samples-contacts (1.0.7), org.andromda.andromdapp.projects:andromda-andromdapp-project-richclient-ant (3.3) +1 more potentially affected by CVE-2026-47884 via org.springframework:spring-webmvc (1.2.9)

org.springframework:spring-webmvc MAVEN version 1.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - org.acegisecurity:acegi-security-samples-contacts 1.0.7 -...

io.awspring.cloud:spring-cloud-aws-starter-integration-sns (>=4.0.0-rc1, <=4.2.0), org.citrusframework.mvn:citrus-maven-plugin (5.0.0-m1) +34 more potentially affected by CVE-2026-47864 via org.springframework.integration:spring-integration-http (>=7.0.0, <=7.0.5)

org.springframework.integration:spring-integration-http MAVEN version =7.0.0, =4.0.0-rc1, =4.2.0 - org.citrusframework.mvn:citrus-maven-plugin 5.0.0-m1 - org.citrusframework:citrus-agent-connector 5.0.0-m1 - org.citrusframework:citrus-cucumber-all 5.0.0-m1 - org.citrusframework:citrus-cucumber-ht...

io.awspring.cloud:spring-cloud-aws-starter-integration-sns (>=4.0.0-m1, <=4.2.0), org.citrusframework.mvn:citrus-maven-plugin (5.0.0-m1) +34 more potentially affected by CVE-2026-47864 via org.springframework.integration:spring-integration-http (>=7.0.0-m1, <=7.0.5)

org.springframework.integration:spring-integration-http MAVEN version =7.0.0-m1, =4.0.0-m1, =4.2.0 - org.citrusframework.mvn:citrus-maven-plugin 5.0.0-m1 - org.citrusframework:citrus-agent-connector 5.0.0-m1 - org.citrusframework:citrus-cucumber-all 5.0.0-m1 -...

com.github.pukkaone:logback-gelf (>=1.1.5, <=1.1.9), com.globo.graylog2:gelfj (>=1.1.16.0, <=1.1.16.1) +13 more potentially affected by CVE-2026-69220 via com.rabbitmq:amqp-client (3.0.4)

com.rabbitmq:amqp-client MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.pukkaone:logback-gelf =1.1.5, =1.1.16.0, =2.0.0, =1.1.3, =1.2, =1.2, =1.5 Source cves: CVE-2026-6922...

dev.sigstore:sigstore-maven-plugin (2.0.0), org.apache.maven.resolver:maven-resolver-generator-sigstore (>=2.0.14, <=2.0.18) +1 more potentially affected by CVE-2026-48791 via dev.sigstore:sigstore-java (2.0.0)

dev.sigstore:sigstore-java MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dev.sigstore:sigstore-java and may be impacted: - dev.sigstore:sigstore-maven-plugin 2.0.0 - org.apache.maven.resolver:maven-resolver-generator-sigstore...

com.srcclr:srcclr-maven-plugin (>=3.1.23, <=3.1.25), org.apache.camel.quarkus:camel-quarkus-opensearch (3.24.0) +20 more potentially affected by CVE-2026-59638 via org.bouncycastle:bctls-fips (>=1.0.9, <=1.0.19)

org.bouncycastle:bctls-fips MAVEN version =1.0.9, =3.1.23, =19.0.0, =14.6.5.3, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.6.4, =4.4.12, =4.4.12, =4.4.12, =4.4.12, =4.9.4 and more Source cves: CVE-2026-59638 Source advisory: MEND:CVE-2026-59638...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: MEND:CVE-2026-59878...

org.apache.camel.kafkaconnector:camel-salesforce-composite-upsert-sink-kafka-connector (4.18.0), org.apache.camel.kafkaconnector:camel-salesforce-create-sink-kafka-connector (4.18.0) +13 more potentially affected by CVE-2026-49099 via org.apache.camel:camel-salesforce (>=4.15.0, <=4.18.2)

org.apache.camel:camel-salesforce MAVEN version =4.15.0, =4.18.1, =4.15.0, =3.29.0, =3.29.0, =3.29.0, =4.15.0, =4.15.0, =2.7.0, =2.7.0, =2.9.0 Source cves: CVE-2026-49099 Source advisory: SNYK:JAVA...