androidx.benchmark:benchmark-common (>=1.2.0-alpha02, <=1.2.0-alpha13), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha02, <=1.2.0-alpha13) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.4.1)

com.squareup.wire:wire-runtime MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02,...

com.squareup.wire:wire-grpc-client (4.9.8), com.squareup.wire:wire-schema (4.9.8) +2 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.8)

com.squareup.wire:wire-runtime MAVEN version 4.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.8 - com.squareup.wire:wire-schema 4.9.8 -...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.17), com.squareup.wire:wire-schema (4.0.0-alpha.17) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.17)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.17 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.19), com.squareup.wire:wire-schema (4.0.0-alpha.19) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.19)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.19 - com.squareup.wire:wire-schema...

com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=1.7.2-micronaut-1.0, <=2.2.2-micronaut-3.0), com.amazonaws:amazon-kinesis-producer (>=0.14.12, <=0.15.7) +113 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.7.1)

com.squareup.wire:wire-runtime MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.agorapulse:micronaut-amazon-awssdk-kinesis-worker =1.7.2-micronaut-1.0, =0.14.12, =1.0.191,...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.8), com.squareup.wire:wire-schema (4.0.0-alpha.8) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.8)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.8 - com.squareup.wire:wire-schema...

PT-2026-42032

Name of the Vulnerable Software and Affected Versions wire-runtime versions prior to 6.3.0 wire-runtime-jvm versions 5.3.1 and 5.3.3 Wire 7 alpha versions prior to 7.0.0-alpha03 Description In the wire-runtime component, the ByteArrayProtoReader32.skipGroup and ProtoReader.skipGroup functions fai...

com.github.cloudfoundry-community:snotel (>=0.1, <=0.2), com.squareup.wire:wire-compiler (1.6.0) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.6.0)

com.squareup.wire:wire-runtime MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.cloudfoundry-community:snotel =0.1, =0.2 - com.squareup.wire:wire-compiler 1.6.0 -...

com.squareup.wire:wire-grpc-client (4.5.5), com.squareup.wire:wire-schema (4.5.5) +3 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.5)

com.squareup.wire:wire-runtime MAVEN version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.5 - com.squareup.wire:wire-schema 4.5.5 -...

com.squareup.wire:wire-compiler (2.0.0-beta9), com.squareup.wire:wire-gson-support (2.0.0-beta9) +4 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta9)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta9 - com.squareup.wire:wire-gson-support 2.0.0-beta9...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.12), com.squareup.wire:wire-schema (4.0.0-alpha.12) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.12)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.12 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.12 - com.squareup.wire:wire-schema...

com.squareup.misk:misk (0.18.0), com.squareup.misk:misk-aws (0.18.0) +42 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.4)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.18.0 - com.squareup.misk:misk-aws 0.18.0 -...

com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=1.7.2-micronaut-1.0, <=2.2.2-micronaut-3.0), com.amazonaws:amazon-kinesis-producer (>=0.14.12, <=0.15.7) +113 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.7.1)

com.squareup.wire:wire-runtime MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.agorapulse:micronaut-amazon-awssdk-kinesis-worker =1.7.2-micronaut-1.0, =0.14.12, =1.0.191,...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.9), com.squareup.wire:wire-schema (4.0.0-alpha.9) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.9)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.9 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.1.1), com.squareup.wire:wire-schema (4.1.1) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.1.1)

com.squareup.wire:wire-runtime MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.1.1 - com.squareup.wire:wire-schema 4.1.1 Source cves:...

androidx.benchmark:benchmark-common (>=1.2.0-alpha16, <=1.3.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha16, <=1.2.4) +5 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.7.0)

com.squareup.wire:wire-runtime MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16,...

app.cash.backfila:client (0.1.3-20210127.1838-76ab4fc), app.cash.backfila:client-misk (0.1.3-20210127.1838-76ab4fc) +16 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.5.0)

com.squareup.wire:wire-runtime MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:client 0.1.3-20210127.1838-76ab4fc - app.cash.backfila:client-misk...

com.squareup.wire:wire-grpc-client (4.4.3), com.squareup.wire:wire-schema (4.4.3) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.3)

com.squareup.wire:wire-runtime MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.4.3 - com.squareup.wire:wire-schema 4.4.3 - io.dyte:core...

com.squareup.wire:wire-grpc-client (4.6.0), com.squareup.wire:wire-schema (4.6.0) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.6.0)

com.squareup.wire:wire-runtime MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.6.0 - com.squareup.wire:wire-schema 4.6.0 Source cves:...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.10), com.squareup.wire:wire-schema (4.0.0-alpha.10) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.10)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.10 - com.squareup.wire:wire-schema...