CVE-2026-110975

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975

A flaw in Kruize Autotune allows for datasources credential disclosure due to a lack of an authentication layer on its REST API. Specifically, the list-datasources (GET /datasources) and datasource-metadata endpoints serialize datasource objects using a default Gson configuration without a field-...

CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

EUVD-2026-109109

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975 Autotune: kruize/autotune: kruize/autotune: datasources credential disclosure

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

CVE-2026-110975

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

PT-2026-122154

A flaw was found in Kruize Autotune. Its REST API ships without an authentication layer, and the endpoints that return datasource configuration — the list-datasources endpoint GET /datasources and the datasource-metadata endpoint — serialized datasource objects using a default Gson configuration...

Astra Linux – vulnerability in libgoogle-gson-java

Packages com.google.code.gson:gson prior to version 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace method in internal classes, which may lead to DoS attacks...

com.squareup.wire:wire-compiler (3.2.1), com.squareup.wire:wire-gradle-plugin (3.2.1) +7 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (3.2.1)

com.squareup.wire:wire-runtime MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.2.1 - com.squareup.wire:wire-gradle-plugin 3.2.1 -...

com.squareup.wire:wire-compiler (2.0.0-beta7), com.squareup.wire:wire-gson-support (2.0.0-beta7) +3 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta7)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta7 - com.squareup.wire:wire-gson-support 2.0.0-beta7...

com.squareup.wire:wire-compiler (1.3.0), com.squareup.wire:wire-gson-support (1.3.0) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.3.0)

com.squareup.wire:wire-runtime MAVEN version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.0 - com.squareup.wire:wire-gson-support 1.3.0 -...

com.squareup.wire:wire-compiler (1.6.1), com.squareup.wire:wire-gson-support (1.6.1) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.6.1)

com.squareup.wire:wire-runtime MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.6.1 - com.squareup.wire:wire-gson-support 1.6.1 -...

com.squareup.wire:wire-compiler (1.0.0), com.squareup.wire:wire-gson-support (1.0.0) potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.0.0)

com.squareup.wire:wire-runtime MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.0.0 - com.squareup.wire:wire-gson-support 1.0.0 Source cves:...

com.github.cloudfoundry-community:snotel (>=0.3.m1, <=0.3.m3), com.github.cloudfoundry-community:snotel-spring-boot-config (>=0.3.m1, <=0.3.m3) +6 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.8.0)

com.squareup.wire:wire-runtime MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.cloudfoundry-community:snotel =0.3.m1, =0.3.m1, =0.3.m1, =0.6.0beta, =0.0.3, =0.0.4 Sour...

com.squareup.wire:wire-compiler (2.0.0-beta1), com.squareup.wire:wire-gson-support (2.0.0-beta1) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta1)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta1 - com.squareup.wire:wire-gson-support 2.0.0-beta1...

com.squareup.wire:wire-compiler (2.0.0-beta10), com.squareup.wire:wire-gson-support (2.0.0-beta10) +4 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta10)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta10 - com.squareup.wire:wire-gson-support...

com.squareup.wire:wire-compiler (1.1.0), com.squareup.wire:wire-gson-support (1.1.0) potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.1.0)

com.squareup.wire:wire-runtime MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.1.0 - com.squareup.wire:wire-gson-support 1.1.0 Source cves:...

com.squareup.wire:wire-compiler (1.5.0), com.squareup.wire:wire-gson-support (1.5.0) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.5.0)

com.squareup.wire:wire-runtime MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.5.0 - com.squareup.wire:wire-gson-support 1.5.0 -...

com.squareup.retrofit:converter-wire (1.6.1), com.squareup.wire:wire-compiler (1.5.1) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (1.5.1)

com.squareup.wire:wire-runtime MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire 1.6.1 - com.squareup.wire:wire-compiler 1.5.1 -...