com.squareup.wire:wire-grpc-client (4.5.3), com.squareup.wire:wire-schema (4.5.3) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.5.3)

com.squareup.wire:wire-runtime MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.3 - com.squareup.wire:wire-schema 4.5.3 Source cves:...

androidx.benchmark:benchmark-common (>=1.1.0-alpha07, <=1.2.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.1.0-alpha07, <=1.2.0-alpha01) +58 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.6.0)

com.squareup.wire:wire-runtime MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.1.0-alpha07, =1.1.0-alpha07, =1.1.0-alpha02, =1.1.0-alpha02,...

com.alcosi:alcosi-template-service-communication (2.00-release), com.github.turasa:core-models (2.15.3_unofficial_135) +43 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.9.9)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.alcosi:alcosi-template-service-communication 2.00-release - com.github.turasa:core-mode...

com.cloudflare.realtimekit:proto-entities-jvm (>=2.108.2, <=2.115.1), com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator (>=0.5.0, <=0.5.1) +36 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.1.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.cloudflare.realtimekit:proto-entities-jvm =2.108.2, =0.5.0, =0.20.0-alpha01, =0.19.2,...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.4), com.squareup.wire:wire-compiler (4.5.4) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.4)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.4 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-compiler (2.0.0-beta5), com.squareup.wire:wire-gson-support (2.0.0-beta5) +3 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (2.0.0-beta5)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta5 - com.squareup.wire:wire-gson-support 2.0.0-beta5...

Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

CVE-2026-45799 Maintainer summary Wire's protobuf group-skipping logic did not reject negative lengths before skipping a length-delimited field inside a group. A crafted protobuf payload could cause Wire to throw an unchecked runtime exception during decoding instead of the documented IOException...

com.squareup.misk:misk (0.19.0), com.squareup.misk:misk-aws (0.19.0) +42 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.5)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.19.0 - com.squareup.misk:misk-aws 0.19.0 -...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.7.1), com.squareup.wire:wire-compiler (4.7.1) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.7.1)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.7.1 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.6.0), com.squareup.wire:wire-compiler (4.6.0) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.6.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.6.0 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.5.3), com.squareup.wire:wire-compiler (4.5.3) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.5.3)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.5.3 - com.squareup.wire:wire-compiler...

com.squareup.wire:wire-grpc-client (4.9.11), com.squareup.wire:wire-schema (4.9.11) +4 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.11)

com.squareup.wire:wire-runtime MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.11 - com.squareup.wire:wire-schema 4.9.11 -...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.18), com.squareup.wire:wire-schema (4.0.0-alpha.18) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.18)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.18 - com.squareup.wire:wire-schema...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.0.0-alpha.15), com.squareup.wire:wire-compiler (4.0.0-alpha.15) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.0-alpha.15)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.0-alpha.15 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.0.0-alpha.15 -...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.9.6), com.squareup.wire:wire-compiler (4.9.6) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.9.6)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.9.6 - com.squareup.wire:wire-compiler...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.0.0-alpha.18), com.squareup.wire:wire-compiler (4.0.0-alpha.18) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.0-alpha.18)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.0-alpha.18 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.0.0-alpha.18 -...

com.squareup.misk:misk (>=0.25.0-20230526.1847-c1fcb3a, <=2023.09.14.092536-70da4ad), com.squareup.misk:misk-admin (>=0.25.0-20230526.1847-c1fcb3a, <=2023.09.14.092536-70da4ad) +27 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.6.2)

com.squareup.wire:wire-runtime MAVEN version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =0.25.0-20230526.1847-c1fcb3a, =0.25.0-20230526.1847-c1fcb3a,...

com.squareup.misk:misk (>=2023.09.14.131150-3fb4032, <=2024.01.24.000543-2260326), com.squareup.misk:misk-admin (>=2023.09.14.131150-3fb4032, <=2024.01.24.000543-2260326) +34 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.8.1)

com.squareup.wire:wire-runtime MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =2023.09.14.131150-3fb4032, =2023.09.14.131150-3fb4032,...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.20), com.squareup.wire:wire-schema (4.0.0-alpha.20) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.20)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.20 - com.squareup.wire:wire-schema...

com.squareup.retrofit2:converter-wire (>=2.0.0, <=2.0.2), com.squareup.wire:wire-codegen-sample (2.1.1) +8 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (2.1.1)

com.squareup.wire:wire-runtime MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit2:converter-wire =2.0.0, =2.0.01, =2.0.21 Source cves: CVE-2026-45799 Source...