12 matches found
CVE-2024-58103 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-58103 vulnerabilities
Vulnerabilities for packages: apache-nifi...
CVE-2024-58103
Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt...
com.squareup.retrofit:converter-wire (>=1.3.0, <=1.6.0), com.squareup.wire:wire-compiler (1.2.0) +1 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.2.0)
com.squareup.wire:wire-runtime MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.3.0, =1.6.0 - com.squareup.wire:wire-compiler 1.2.0 -...
com.squareup.wire:wire-compiler (2.0.0-beta4), com.squareup.wire:wire-gson-support (2.0.0-beta4) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta4)
com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta4 - com.squareup.wire:wire-gson-support 2.0.0-beta4...
com.squareup.wire:wire-compiler (2.0.2), com.squareup.wire:wire-gson-support (2.0.2) +4 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.2)
com.squareup.wire:wire-runtime MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.2 - com.squareup.wire:wire-gson-support 2.0.2 -...
com.squareup.retrofit2:converter-wire (>=2.0.0, <=2.0.2), com.squareup.wire:wire-codegen-sample (2.1.1) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.1.1)
com.squareup.wire:wire-runtime MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit2:converter-wire =2.0.0, =2.0.01, =2.0.21 Source cves: CVE-2024-58103 Source...
androidx.benchmark:benchmark-common (>=1.1.0-alpha07, <=1.2.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.1.0-alpha07, <=1.2.0-alpha01) +58 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.6.0)
com.squareup.wire:wire-runtime MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.1.0-alpha07, =1.1.0-alpha07, =1.1.0-alpha02, =1.1.0-alpha02,...
com.squareup.wire:wire-grpc-client (4.0.0-alpha.9), com.squareup.wire:wire-schema (4.0.0-alpha.9) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.9)
com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.9 - com.squareup.wire:wire-schema...
androidx.benchmark:benchmark-common (>=1.2.0-alpha16, <=1.3.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha16, <=1.2.4) +5 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.7.0)
com.squareup.wire:wire-runtime MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16,...
com.squareup.wire:wire-grpc-client (4.9.8), com.squareup.wire:wire-schema (4.9.8) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.9.8)
com.squareup.wire:wire-runtime MAVEN version 4.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.8 - com.squareup.wire:wire-schema 4.9.8 -...
