com.squareup.misk:misk (>=2025.08.19.093556-9a9e98f, <=2025.09.02.160854-b53b5bd), com.squareup.misk:misk-admin (>=2025.08.19.093556-9a9e98f, <=2025.09.02.160854-b53b5bd) +31 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.3.11)

com.squareup.wire:wire-runtime MAVEN version 5.3.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =2025.08.19.093556-9a9e98f, =2025.08.19.093556-9a9e98f,...

com.squareup.misk:misk (0.6.0), com.squareup.misk:misk-aws (0.6.0) +33 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.0.0-alpha01)

com.squareup.wire:wire-runtime MAVEN version 3.0.0-alpha01 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.6.0 - com.squareup.misk:misk-aws 0.6.0 -...

com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator (0.2.0), com.squareup.wire:com.squareup.wire.gradle.plugin (4.0.1) +13 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.1)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator 0.2.0 -...

com.cloudflare.realtimekit:core (>=0.1.0, <=1.1.0), com.cloudflare.realtimekit:mobile-core-bridge (>=1.5.0, <=1.5.6) +6 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.7.2)

com.squareup.wire:wire-runtime MAVEN version 4.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.cloudflare.realtimekit:core =0.1.0, =1.5.0, =0.0.1, =1.19.16, =1.0.1, =1.2.1, =1.4.1 Source cve...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index in the skipGroup function. An attacker can cause a service crash by sending a crafted protobuf payload with a negative length in a length-delimited field inside a group, leading to an unchecked runtime...

com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=1.7.2-micronaut-1.0, <=2.2.2-micronaut-3.0), com.amazonaws:amazon-kinesis-producer (>=0.14.12, <=0.15.7) +113 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.7.1)

com.squareup.wire:wire-runtime MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.agorapulse:micronaut-amazon-awssdk-kinesis-worker =1.7.2-micronaut-1.0, =0.14.12, =1.0.191,...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.19), com.squareup.wire:wire-schema (4.0.0-alpha.19) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.0.0-alpha.19)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.19 - com.squareup.wire:wire-schema...

ch.admin.bit.jeap:jeap-messaging-glue-schema-registry (>=8.51.0, <=15.2.0), com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=4.0.7, <=5.0.3) +83 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (5.2.0)

com.squareup.wire:wire-runtime MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - ch.admin.bit.jeap:jeap-messaging-glue-schema-registry =8.51.0, =4.0.7, =2.0.1, =3.0.14.0, =1.0.30,...

com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator (0.1.8), com.codellyrandom:wire-typescript-generator (>=0.1.0, <=0.1.8) +44 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (3.7.0)

com.squareup.wire:wire-runtime MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator 0.1.8 -...

com.github.cloudfoundry-community:snotel (>=0.1, <=0.2), com.squareup.wire:wire-compiler (1.6.0) +2 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (1.6.0)

com.squareup.wire:wire-runtime MAVEN version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.cloudfoundry-community:snotel =0.1, =0.2 - com.squareup.wire:wire-compiler 1.6.0 -...

com.squareup.wire:wire-grpc-client (4.5.2), com.squareup.wire:wire-schema (4.5.2) potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.5.2)

com.squareup.wire:wire-runtime MAVEN version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.2 - com.squareup.wire:wire-schema 4.5.2 Source cves:...

com.github.cloudfoundry-community:snotel (>=0.3.m1, <=0.3.m3), com.github.cloudfoundry-community:snotel-spring-boot-config (>=0.3.m1, <=0.3.m3) +6 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (1.8.0)

com.squareup.wire:wire-runtime MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.cloudfoundry-community:snotel =0.3.m1, =0.3.m1, =0.3.m1, =0.6.0beta, =0.0.3, =0.0.4 Sour...

com.github.turasa:models-jvm (>=2.15.3_unofficial_136, <=2.15.3_unofficial_145), com.github.turasa:signal-network (2.15.3_unofficial_145) +22 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.9.11)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.9.11 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.github.turasa:models-jvm =2.15.3unofficial136, =2.15.3unofficial136,...

com.squareup.wire:com.squareup.wire.gradle.plugin (4.0.0-alpha.17), com.squareup.wire:wire-compiler (4.0.0-alpha.17) +12 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.0-alpha.17)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.0-alpha.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:com.squareup.wire.gradle.plugin 4.0.0-alpha.17 -...

ch.admin.bit.jeap:jeap-messaging-glue-schema-registry (>=8.15.0, <=8.50.0), com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=3.4.3, <=4.0.6) +90 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.3.0)

com.squareup.wire:wire-runtime MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - ch.admin.bit.jeap:jeap-messaging-glue-schema-registry =8.15.0, =3.4.3, =0.15.8, =1.0.20, =1.0.20,...

androidx.benchmark:benchmark-common (>=1.3.0-alpha02, <=1.3.4), androidx.benchmark:benchmark-macro (>=1.3.0-alpha02, <=1.3.4) +8 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.7)

com.squareup.wire:wire-runtime MAVEN version 4.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.3.0-alpha02, =1.3.0-alpha02, =2.5.9.final, =2.5.9.final,...

com.squareup.wire:wire-grpc-client-jvm (4.0.0-alpha.10), com.squareup.wire:wire-reflector-jvm (4.0.0-alpha.10) +1 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.0-alpha.10)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:wire-grpc-client-jvm 4.0.0-alpha.10 -...

androidx.benchmark:benchmark-common (>=1.2.0-alpha02, <=1.2.0-alpha13), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha02, <=1.2.0-alpha13) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.4.1)

com.squareup.wire:wire-runtime MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02,...

com.squareup.wire:wire-grpc-client (4.9.8), com.squareup.wire:wire-schema (4.9.8) +2 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.8)

com.squareup.wire:wire-runtime MAVEN version 4.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.8 - com.squareup.wire:wire-schema 4.9.8 -...

androidx.benchmark:benchmark-common (>=1.2.0-alpha16, <=1.3.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha16, <=1.2.4) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.7.0)

com.squareup.wire:wire-runtime MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16,...