androidx.benchmark:benchmark-common (>=1.2.0-alpha02, <=1.2.0-alpha13), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha02, <=1.2.0-alpha13) +5 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.1)

com.squareup.wire:wire-runtime MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02,...

com.squareup.wire:wire-compiler (2.0.0-beta8), com.squareup.wire:wire-gson-support (2.0.0-beta8) +4 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta8)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta8 - com.squareup.wire:wire-gson-support 2.0.0-beta8...

com.squareup.wire:wire-compiler (2.0.0-beta6), com.squareup.wire:wire-gson-support (2.0.0-beta6) +3 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta6)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta6 - com.squareup.wire:wire-gson-support 2.0.0-beta6...

com.squareup.wire:wire-grpc-client (4.5.6), com.squareup.wire:wire-schema (4.5.6) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.6)

com.squareup.wire:wire-runtime MAVEN version 4.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.6 - com.squareup.wire:wire-schema 4.5.6 Source cves:...

com.squareup.misk:misk (0.8.0), com.squareup.misk:misk-aws (0.8.0) +34 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.0.0)

com.squareup.wire:wire-runtime MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.8.0 - com.squareup.misk:misk-aws 0.8.0 - com.squareup.misk:misk-crypto 0.8...

com.github.cloudfoundry-community:snotel (>=0.3.m1, <=0.3.m3), com.github.cloudfoundry-community:snotel-spring-boot-config (>=0.3.m1, <=0.3.m3) +6 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.8.0)

com.squareup.wire:wire-runtime MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.cloudfoundry-community:snotel =0.3.m1, =0.3.m1, =0.3.m1, =0.6.0beta, =0.0.3, =0.0.4 Sour...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.17), com.squareup.wire:wire-schema (4.0.0-alpha.17) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.17)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.17 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.19), com.squareup.wire:wire-schema (4.0.0-alpha.19) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.19)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.19 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.16), com.squareup.wire:wire-schema (4.0.0-alpha.16) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.16)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.16 - com.squareup.wire:wire-schema...

app.cash.backfila.client.sqldelight:app.cash.backfila.client.sqldelight.gradle.plugin (2024.10.23.144516-5d9f39a), app.cash.backfila:backfila-embedded (>=0.1.4-20221221.1702-8b7db03, <=2026.10.01.201111-ad9f619) +167 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.2.0)

com.squareup.wire:wire-runtime MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila.client.sqldelight:app.cash.backfila.client.sqldelight.gradle.plugin...

com.gitee.chinasoft_ohos:svgaplayer-ohos (>=1.0.0, <=1.0.1), com.immomo.cosmos.effect:mmsvga (>=0.2.2021.0125.1, <=0.2.2021.0823.1_tantan) +27 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.3.0-rc1)

com.squareup.wire:wire-runtime MAVEN version 2.3.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.gitee.chinasoftohos:svgaplayer-ohos =1.0.0, =0.2.2021.0125.1, =1.0.0, =0.0.1, =0.2.2, =0.1....

com.squareup.wire:wire-grpc-client (4.5.3), com.squareup.wire:wire-schema (4.5.3) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.3)

com.squareup.wire:wire-runtime MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.3 - com.squareup.wire:wire-schema 4.5.3 Source cves:...

com.squareup.wire:wire-compiler (1.6.1), com.squareup.wire:wire-gson-support (1.6.1) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.6.1)

com.squareup.wire:wire-runtime MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.6.1 - com.squareup.wire:wire-gson-support 1.6.1 -...

com.squareup.wire:wire-grpc-client (4.9.4), com.squareup.wire:wire-schema (4.9.4) +1 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.9.4)

com.squareup.wire:wire-runtime MAVEN version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.4 - com.squareup.wire:wire-schema 4.9.4 -...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.15), com.squareup.wire:wire-schema (4.0.0-alpha.15) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.15)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.15 - com.squareup.wire:wire-schema...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to improper enforcement of recursion limits in ByteArrayProtoReader32.kt and ProtoReader.kt. An attacker can cause a denial of service by sending deeply nested group structures. Remediation Upgrade...

androidx.benchmark:benchmark-common (>=1.1.0-alpha07, <=1.4.0-alpha07), androidx.benchmark:benchmark-junit4 (>=1.1.0-alpha07, <=1.2.4) +441 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (>=1.0.0, <=5.1.0)

com.squareup.wire:wire-runtime MAVEN version =1.0.0, =1.1.0-alpha07, =1.1.0-alpha07, =1.1.0-alpha02, =1.1.0-alpha02, =0.1.4-20211109.2053-a41370d, =0.1.0, =0.1.4-20211109.2053-a41370d, =0.1.4-20211109.2053-a41370d, =0.1.4-20220406.2256-c2ad520, =0.1.4-20211109.2053-a41370d, =0.1.0,...

com.squareup.wire:wire-compiler (1.5.0), com.squareup.wire:wire-gson-support (1.5.0) +2 more potentially affected by CVE-2023-3635 via com.squareup.okio:okio (0.9.0)

com.squareup.okio:okio MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okio:okio and may be impacted: - com.squareup.wire:wire-compiler 1.5.0 - com.squareup.wire:wire-gson-support 1.5.0 -...

com.squareup.wire:wire-compiler (1.4.0), com.squareup.wire:wire-gson-support (1.4.0) +2 more potentially affected by CVE-2023-3635 via com.squareup.okio:okio (0.6.0)

com.squareup.okio:okio MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okio:okio and may be impacted: - com.squareup.wire:wire-compiler 1.4.0 - com.squareup.wire:wire-gson-support 1.4.0 -...