androidx.benchmark:benchmark-common (>=1.2.0-alpha02, <=1.2.0-alpha13), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha02, <=1.2.0-alpha13) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.4.1)

com.squareup.wire:wire-runtime MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02,...

ai.looktech.ltrpc.schema:app-server (>=1.7.0, <=1.7.1), ai.looktech.ltrpc.schema:bt-server (>=1.7.0, <=1.7.1) +11 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.5.0)

com.squareup.wire:wire-runtime MAVEN version 5.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - ai.looktech.ltrpc.schema:app-server =1.7.0, =1.7.0, =1.6.1, =1.10.0, =0.4.2, =1.53.0-alpha,...

com.squareup.wire:wire-grpc-client (4.9.6), com.squareup.wire:wire-schema (4.9.6) +1 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.6)

com.squareup.wire:wire-runtime MAVEN version 4.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.6 - com.squareup.wire:wire-schema 4.9.6 -...

com.squareup.wire:wire-grpc-client (4.9.8), com.squareup.wire:wire-schema (4.9.8) +2 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.8)

com.squareup.wire:wire-runtime MAVEN version 4.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.8 - com.squareup.wire:wire-schema 4.9.8 -...

com.squareup.wire:wire-compiler (1.3.1), com.squareup.wire:wire-gson-support (1.3.1) +1 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (1.3.1)

com.squareup.wire:wire-runtime MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.3.1 - com.squareup.wire:wire-gson-support 1.3.1 -...

com.squareup.wire:wire-compiler (3.2.1), com.squareup.wire:wire-gradle-plugin (3.2.1) +7 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.2.1)

com.squareup.wire:wire-runtime MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 3.2.1 - com.squareup.wire:wire-gradle-plugin 3.2.1 -...

com.squareup.wire:wire-grpc-client (4.6.1), com.squareup.wire:wire-schema (4.6.1) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.6.1)

com.squareup.wire:wire-runtime MAVEN version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.6.1 - com.squareup.wire:wire-schema 4.6.1 Source cves:...

com.squareup.retrofit:converter-wire (>=1.2.1, <=1.2.2), com.squareup.wire:wire-compiler (1.0.1) +1 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (1.0.1)

com.squareup.wire:wire-runtime MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.2.1, =1.2.2 - com.squareup.wire:wire-compiler 1.0.1 -...

cn.szkug.krpc:runtime (1.0.0), com.squareup.misk:misk (>=2024.01.24.035350-94a3236, <=2024.08.19.213921-3faf89c) +32 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.3)

com.squareup.wire:wire-runtime MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - cn.szkug.krpc:runtime 1.0.0 - com.squareup.misk:misk =2024.01.24.035350-94a3236,...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.9.6), com.squareup.wire:wire-compiler (4.9.6) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.9.6)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.9.6 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.5), com.squareup.wire:wire-compiler (4.5.5) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.5)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.5 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-compiler (4.0.0-alpha.3), com.squareup.wire:wire-gradle-plugin (4.0.0-alpha.3) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.3)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 4.0.0-alpha.3 - com.squareup.wire:wire-gradle-plugin...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.0.0), com.squareup.wire:wire-compiler (4.0.0) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.0.0 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-grpc-client (5.0.0-alpha01), com.squareup.wire:wire-schema (5.0.0-alpha01) +1 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.0.0-alpha01)

com.squareup.wire:wire-runtime MAVEN version 5.0.0-alpha01 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 5.0.0-alpha01 - com.squareup.wire:wire-schema...

com.squareup.wire:proto-pruner (3.0.2), com.squareup.wire:wire-codegen-sample (3.0.2) +18 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.0.2)

com.squareup.wire:wire-runtime MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:proto-pruner 3.0.2 - com.squareup.wire:wire-codegen-sample 3.0.2 -...

MAL-2026-4734 Malicious code in xorma-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd1e155ef0f73465f5fe6f401a4f90c521d5268eb65bb9bc594caa4a69732260 On require'xorma-js', a top-level IIFE in dist/index.js synchronously executes npm uninstall clsx-js && npm install clsx-js via childprocess.execSync...

crun: crun: Privilege escalation due to incorrect parsing of the `--user` option

A flaw was found in crun, an open-source OCI Container Runtime. A local user can exploit this vulnerability due to incorrect parsing of the --user option when using crun exec. The value 1 is misinterpreted as root privileges User ID 0 and Group ID 0 instead of the intended User ID 1 and Group ID ...

GHSA-W4VJ-R5PG-3722 Mailpit: Concurrent map read & write in proxy CSS rewriter - remote unauth crash (fatal error: concurrent map read and map write)

Summary The screenshot/print proxy /proxy?data=… maintains a package-level assets mapstringMessageAssets cache, but reads the map without holding assetsMutex while a long-running cleanup goroutine and re-entrant CSS-rewriting code path concurrently write to it under the lock. When the...

fabric-chaincode-java: TLS Private Key Password Disclosed in INFO Startup Logs in Chaincode-as-a-Service Mode

When chaincode is deployed in chaincode-as-a-service mode with TLS enabled, the chaincode server INFO level logging includes the TLS private key password in plaintext. An attacker with access to the chaincode server logs could recover the TLS private key password. If the attacker can also obtain...

kernel: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime

In the Linux kernel, the following vulnerability has been resolved: net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime Assuming the "rx-vlan-filter" feature is enabled on a net device, the 8021q module will automatically add or remove VLAN 0 when the net device is put...