com.squareup.misk:misk (2025.08.14.063635-1fd415a), com.squareup.misk:misk-admin (2025.08.14.063635-1fd415a) +27 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.3.9)

com.squareup.wire:wire-runtime MAVEN version 5.3.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 2025.08.14.063635-1fd415a - com.squareup.misk:misk-admin...

com.slack.foundry:tracing (>=0.29.1, <=0.30.0), com.squareup.misk.schema-migrator:com.squareup.misk.schema-migrator.gradle.plugin (>=2025.08.07.142709-b2b6e6c, <=2025.08.08.100635-5aa9c39) +57 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.3.7)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.slack.foundry:tracing =0.29.1, =2025.08.07.142709-b2b6e6c, =2025.08.07.142709-b2b6e6c,...

androidx.benchmark:benchmark-common (>=1.2.0-alpha14, <=1.2.0-alpha15), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha14, <=1.2.0-alpha15) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.5.1)

com.squareup.wire:wire-runtime MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha14, =1.2.0-alpha14, =1.2.0-alpha14, =1.2.0-alpha14,...

ch.admin.bit.jeap:jeap-messaging-glue-schema-registry (>=8.15.0, <=8.50.0), com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=3.4.3, <=4.0.6) +102 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.3.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - ch.admin.bit.jeap:jeap-messaging-glue-schema-registry =8.15.0, =3.4.3, =0.15.8, =1.0.20,...

com.squareup.misk:misk (>=2025.08.08.120309-f9b3da6, <=2025.08.13.204324-d02481c), com.squareup.misk:misk-admin (>=2025.08.08.120309-f9b3da6, <=2025.08.13.204324-d02481c) +27 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.3.8)

com.squareup.wire:wire-runtime MAVEN version 5.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =2025.08.08.120309-f9b3da6, =2025.08.08.120309-f9b3da6,...

com.eulerstream:tiktok-live-proto (>=0.1.1, <=0.2.0), com.eulerstream:tiktok-live-proto-kotlin (>=0.1.1, <=0.2.0) +34 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.5.1)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.eulerstream:tiktok-live-proto =0.1.1, =0.1.1, =0.35.0, =0.35.1 -...

com.squareup.wire:wire-grpc-client (4.5.3), com.squareup.wire:wire-schema (4.5.3) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.5.3)

com.squareup.wire:wire-runtime MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.3 - com.squareup.wire:wire-schema 4.5.3 Source cves:...

androidx.benchmark:benchmark-common (>=1.1.0-alpha07, <=1.2.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.1.0-alpha07, <=1.2.0-alpha01) +58 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.6.0)

com.squareup.wire:wire-runtime MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.1.0-alpha07, =1.1.0-alpha07, =1.1.0-alpha02, =1.1.0-alpha02,...

com.alcosi:alcosi-template-service-communication (2.00-release), com.github.turasa:core-models (2.15.3_unofficial_135) +43 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.9.9)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.alcosi:alcosi-template-service-communication 2.00-release - com.github.turasa:core-mode...

com.cloudflare.realtimekit:proto-entities-jvm (>=2.108.2, <=2.115.1), com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator (>=0.5.0, <=0.5.1) +36 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.1.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.cloudflare.realtimekit:proto-entities-jvm =2.108.2, =0.5.0, =0.20.0-alpha01, =0.19.2,...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.4), com.squareup.wire:wire-compiler (4.5.4) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.4)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.4 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-compiler (2.0.0-beta5), com.squareup.wire:wire-gson-support (2.0.0-beta5) +3 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (2.0.0-beta5)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta5 - com.squareup.wire:wire-gson-support 2.0.0-beta5...

Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

CVE-2026-45799 Maintainer summary Wire's protobuf group-skipping logic did not reject negative lengths before skipping a length-delimited field inside a group. A crafted protobuf payload could cause Wire to throw an unchecked runtime exception during decoding instead of the documented IOException...

com.squareup.misk:misk (0.19.0), com.squareup.misk:misk-aws (0.19.0) +42 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.5)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.19.0 - com.squareup.misk:misk-aws 0.19.0 -...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.9), com.squareup.wire:wire-schema (4.0.0-alpha.9) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.9)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.9 - com.squareup.wire:wire-schema...

androidx.benchmark:benchmark-common (>=1.2.0-alpha16, <=1.3.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha16, <=1.2.4) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.7.0)

com.squareup.wire:wire-runtime MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16,...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.3), com.squareup.wire:wire-compiler (4.5.3) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.3)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.3 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-grpc-client (4.9.11), com.squareup.wire:wire-schema (4.9.11) +4 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.11)

com.squareup.wire:wire-runtime MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.11 - com.squareup.wire:wire-schema 4.9.11 -...

com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=1.7.2-micronaut-1.0, <=2.2.2-micronaut-3.0), com.amazonaws:amazon-kinesis-producer (>=0.14.12, <=0.15.7) +113 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.7.1)

com.squareup.wire:wire-runtime MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.agorapulse:micronaut-amazon-awssdk-kinesis-worker =1.7.2-micronaut-1.0, =0.14.12, =1.0.191,...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.18), com.squareup.wire:wire-schema (4.0.0-alpha.18) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.18)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.18 - com.squareup.wire:wire-schema...