com.squareup.wire:wire-grpc-client (4.4.3), com.squareup.wire:wire-schema (4.4.3) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.3)

com.squareup.wire:wire-runtime MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.4.3 - com.squareup.wire:wire-schema 4.4.3 - io.dyte:core...

com.squareup.wire:wire-grpc-client (4.9.4), com.squareup.wire:wire-schema (4.9.4) +1 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.9.4)

com.squareup.wire:wire-runtime MAVEN version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.4 - com.squareup.wire:wire-schema 4.9.4 -...

com.squareup.retrofit:converter-wire (>=2.0.0-beta1, <=2.0.0-beta2), com.squareup.wire:wire-compiler (1.7.0) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.7.0)

com.squareup.wire:wire-runtime MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =2.0.0-beta1, =2.0.0-beta2 - com.squareup.wire:wire-compiler...

com.jiechic.library.wire:wire-gradle-plugin (>=1.0.0, <=1.0.1), com.squareup.wire:wire-codegen-sample (2.1.2) +9 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.1.2)

com.squareup.wire:wire-runtime MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.jiechic.library.wire:wire-gradle-plugin =1.0.0, =0.6.6, =2.0.0.m5, =2.0.0.m5, =2.0.0.m7 Source...

GHSA-PWF9-Q62P-V7WC Wire has Uncontrolled Recursion on Nested Groups

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt...

com.squareup.wire:wire-compiler (2.0.0-beta9), com.squareup.wire:wire-gson-support (2.0.0-beta9) +4 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta9)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta9 - com.squareup.wire:wire-gson-support 2.0.0-beta9...

com.squareup.misk:misk (0.18.0), com.squareup.misk:misk-aws (0.18.0) +42 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.4)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.18.0 - com.squareup.misk:misk-aws 0.18.0 -...

com.squareup.wire:wire-compiler (1.1.0), com.squareup.wire:wire-gson-support (1.1.0) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.1.0)

com.squareup.wire:wire-runtime MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.1.0 - com.squareup.wire:wire-gson-support 1.1.0 Source cves:...

com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=1.7.2-micronaut-1.0, <=2.2.2-micronaut-3.0), com.amazonaws:amazon-kinesis-producer (>=0.14.12, <=0.15.7) +113 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.7.1)

com.squareup.wire:wire-runtime MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.agorapulse:micronaut-amazon-awssdk-kinesis-worker =1.7.2-micronaut-1.0, =0.14.12, =1.0.191,...

com.squareup.retrofit:converter-wire (>=1.3.0, <=1.6.0), com.squareup.wire:wire-compiler (1.2.0) +1 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.2.0)

com.squareup.wire:wire-runtime MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.3.0, =1.6.0 - com.squareup.wire:wire-compiler 1.2.0 -...

androidx.benchmark:benchmark-common (>=1.2.0-alpha14, <=1.2.0-alpha15), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha14, <=1.2.0-alpha15) +5 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.1)

com.squareup.wire:wire-runtime MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha14, =1.2.0-alpha14, =1.2.0-alpha14, =1.2.0-alpha14,...

com.squareup.wire:wire-compiler (2.0.0-beta2), com.squareup.wire:wire-gson-support (2.0.0-beta2) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta2)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta2 - com.squareup.wire:wire-gson-support 2.0.0-beta2...

com.squareup.wire:wire-grpc-client (4.5.4), com.squareup.wire:wire-schema (4.5.4) +3 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.4)

com.squareup.wire:wire-runtime MAVEN version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.4 - com.squareup.wire:wire-schema 4.5.4 -...

com.squareup.wire:wire-grpc-client (4.6.0), com.squareup.wire:wire-schema (4.6.0) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.6.0)

com.squareup.wire:wire-runtime MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.6.0 - com.squareup.wire:wire-schema 4.6.0 Source cves:...

com.squareup.wire:wire-grpc-client (4.5.2), com.squareup.wire:wire-schema (4.5.2) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.2)

com.squareup.wire:wire-runtime MAVEN version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.2 - com.squareup.wire:wire-schema 4.5.2 Source cves:...

com.squareup.wire:wire-grpc-client (4.9.8), com.squareup.wire:wire-schema (4.9.8) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.9.8)

com.squareup.wire:wire-runtime MAVEN version 4.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.8 - com.squareup.wire:wire-schema 4.9.8 -...

androidx.benchmark:benchmark-common (>=1.3.0-alpha02, <=1.3.4), androidx.benchmark:benchmark-macro (>=1.3.0-alpha02, <=1.3.4) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.9.7)

com.squareup.wire:wire-runtime MAVEN version 4.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.3.0-alpha02, =1.3.0-alpha02, =2.5.9.final, =2.5.9.final,...

androidx.benchmark:benchmark-common (>=1.2.0-alpha16, <=1.3.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha16, <=1.2.4) +5 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.7.0)

com.squareup.wire:wire-runtime MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16,...

com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator (0.1.8), com.codellyrandom:wire-typescript-generator (>=0.1.0, <=0.1.8) +44 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.7.0)

com.squareup.wire:wire-runtime MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator 0.1.8 -...

app.cash.backfila:backfila-embedded (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42), app.cash.backfila:client-base (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.2)

com.squareup.wire:wire-runtime MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:backfila-embedded =2023.08.14.172409-6d1d2a2, =2023.08.14.172409-6d1d2a2,...