app.cash.backfila.client.sqldelight:app.cash.backfila.client.sqldelight.gradle.plugin (2024.10.23.144516-5d9f39a), app.cash.backfila:backfila-embedded (>=0.1.4-20221221.1702-8b7db03, <=2026.10.01.201111-ad9f619) +167 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.2.0)

com.squareup.wire:wire-runtime MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila.client.sqldelight:app.cash.backfila.client.sqldelight.gradle.plugin...

ai.driftkit:driftkit-context-engineering-spring-ai-starter (>=0.6.0, <=0.9.2), ai.driftkit:driftkit-context-engineering-spring-boot-starter (>=0.5.0, <=0.9.2) +7407 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcpkix-jdk18on (>=1.71, <=1.78.1)

org.bouncycastle:bcpkix-jdk18on MAVEN version =1.71, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.8.3, =0.8.3, =0.8.3, =0.5.0, =0.5.0, =3.10.0.5, =2023.12.01.210510-f61f157, =2023.12.01.210510-f61f157, =2023.12.01.210510-f61f157, =2025.05.12.160240-6152e21 and more Source cves: CVE-2025-8916 Source...

app.cash.backfila:backfila-embedded (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42), app.cash.backfila:client-base (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.2)

com.squareup.wire:wire-runtime MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:backfila-embedded =2023.08.14.172409-6d1d2a2, =2023.08.14.172409-6d1d2a2,...

app.cash.backfila:client (>=0.1.0, <=0.1.3-20200811-2e41939), app.cash.backfila:client-misk (>=0.1.0, <=0.1.3-20200811-2e41939) +39 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.0.1)

com.squareup.wire:wire-runtime MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:client =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0, =0.9.0,...

androidx.benchmark:benchmark-common (>=1.1.0-alpha07, <=1.4.0-alpha07), androidx.benchmark:benchmark-junit4 (>=1.1.0-alpha07, <=1.2.4) +441 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (>=1.0.0, <=5.1.0)

com.squareup.wire:wire-runtime MAVEN version =1.0.0, =1.1.0-alpha07, =1.1.0-alpha07, =1.1.0-alpha02, =1.1.0-alpha02, =0.1.4-20211109.2053-a41370d, =0.1.0, =0.1.4-20211109.2053-a41370d, =0.1.4-20211109.2053-a41370d, =0.1.4-20220406.2256-c2ad520, =0.1.4-20211109.2053-a41370d, =0.1.0,...