androidx.benchmark:benchmark-common (>=1.3.0-alpha02, <=1.3.4), androidx.benchmark:benchmark-macro (>=1.3.0-alpha02, <=1.3.4) +8 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.7)

com.squareup.wire:wire-runtime MAVEN version 4.9.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.3.0-alpha02, =1.3.0-alpha02, =2.5.9.final, =2.5.9.final,...

com.squareup.wire:wire-grpc-client-jvm (4.0.0-alpha.10), com.squareup.wire:wire-reflector-jvm (4.0.0-alpha.10) +1 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (4.0.0-alpha.10)

com.squareup.wire:wire-runtime-jvm MAVEN version 4.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - com.squareup.wire:wire-grpc-client-jvm 4.0.0-alpha.10 -...

androidx.benchmark:benchmark-common (>=1.2.0-alpha02, <=1.2.0-alpha13), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha02, <=1.2.0-alpha13) +5 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.4.1)

com.squareup.wire:wire-runtime MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02, =1.2.0-alpha02,...

com.squareup.wire:wire-grpc-client (4.9.8), com.squareup.wire:wire-schema (4.9.8) +2 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime (4.9.8)

com.squareup.wire:wire-runtime MAVEN version 4.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.9.8 - com.squareup.wire:wire-schema 4.9.8 -...

com.squareup.wire:com.squareup.wire.gradle.plugin (>=7.0.0-alpha01, <=7.0.0-alpha02), com.squareup.wire:wire-compiler (>=7.0.0-alpha01, <=7.0.0-alpha02) +11 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (>=7.0.0-alpha01, <=7.0.0-alpha02)

com.squareup.wire:wire-runtime-jvm MAVEN version =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha01, =7.0.0-alpha02 Source...

Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

CVE-2026-45799 Maintainer summary Wire's protobuf group-skipping logic did not reject negative lengths before skipping a length-delimited field inside a group. A crafted protobuf payload could cause Wire to throw an unchecked runtime exception during decoding instead of the documented IOException...

PT-2026-42032

Name of the Vulnerable Software and Affected Versions wire-runtime versions prior to 6.3.0 wire-runtime-jvm versions 5.3.1 and 5.3.3 Wire 7 alpha versions prior to 7.0.0-alpha03 Description In the wire-runtime component, the ByteArrayProtoReader32.skipGroup and ProtoReader.skipGroup functions fai...

com.squareup.wire:wire-compiler (1.1.0), com.squareup.wire:wire-gson-support (1.1.0) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.1.0)

com.squareup.wire:wire-runtime MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 1.1.0 - com.squareup.wire:wire-gson-support 1.1.0 Source cves:...

com.squareup.retrofit:converter-wire (>=1.2.1, <=1.2.2), com.squareup.wire:wire-compiler (1.0.1) +1 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (1.0.1)

com.squareup.wire:wire-runtime MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit:converter-wire =1.2.1, =1.2.2 - com.squareup.wire:wire-compiler 1.0.1 -...

com.enrichmeai.culvert:data-pipeline-gcp-dataflow (>=0.1.0, <=0.5.0), com.google.cloud.bigtable:bigtable-beam-import (>=2.14.1, <=2.20.2) +77 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.8.0)

com.squareup.wire:wire-runtime MAVEN version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.enrichmeai.culvert:data-pipeline-gcp-dataflow =0.1.0, =2.14.1, =0.0.4, =0.4.7, =0.4.7, =0.4.7,...

androidx.benchmark:benchmark-common (>=1.2.0-alpha16, <=1.3.0-alpha01), androidx.benchmark:benchmark-junit4 (>=1.2.0-alpha16, <=1.2.4) +5 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.7.0)

com.squareup.wire:wire-runtime MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - androidx.benchmark:benchmark-common =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16, =1.2.0-alpha16,...

com.squareup.misk:misk (>=0.25.0-20230526.1847-c1fcb3a, <=2023.09.14.092536-70da4ad), com.squareup.misk:misk-admin (>=0.25.0-20230526.1847-c1fcb3a, <=2023.09.14.092536-70da4ad) +27 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.6.2)

com.squareup.wire:wire-runtime MAVEN version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk =0.25.0-20230526.1847-c1fcb3a, =0.25.0-20230526.1847-c1fcb3a,...

com.squareup.wire:wire-grpc-client (4.6.1), com.squareup.wire:wire-schema (4.6.1) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.6.1)

com.squareup.wire:wire-runtime MAVEN version 4.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.6.1 - com.squareup.wire:wire-schema 4.6.1 Source cves:...

com.squareup.wire:wire-grpc-client (4.6.0), com.squareup.wire:wire-schema (4.6.0) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.6.0)

com.squareup.wire:wire-runtime MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.6.0 - com.squareup.wire:wire-schema 4.6.0 Source cves:...

com.squareup.wire:wire-grpc-client (4.5.6), com.squareup.wire:wire-schema (4.5.6) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.6)

com.squareup.wire:wire-runtime MAVEN version 4.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.6 - com.squareup.wire:wire-schema 4.5.6 Source cves:...

com.squareup.wire:wire-grpc-client (4.5.5), com.squareup.wire:wire-schema (4.5.5) +3 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.5)

com.squareup.wire:wire-runtime MAVEN version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.5 - com.squareup.wire:wire-schema 4.5.5 -...

com.squareup.wire:wire-grpc-client (4.5.3), com.squareup.wire:wire-schema (4.5.3) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.3)

com.squareup.wire:wire-runtime MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.3 - com.squareup.wire:wire-schema 4.5.3 Source cves:...

com.squareup.wire:wire-grpc-client (4.5.2), com.squareup.wire:wire-schema (4.5.2) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.2)

com.squareup.wire:wire-runtime MAVEN version 4.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.2 - com.squareup.wire:wire-schema 4.5.2 Source cves:...

com.github.jg513:webpb-spring (0.0.4), com.squareup.wire:wire-compiler (3.2.2) +17 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.2.2)

com.squareup.wire:wire-runtime MAVEN version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.github.jg513:webpb-spring 0.0.4 - com.squareup.wire:wire-compiler 3.2.2 -...

com.squareup.misk:misk (0.8.0), com.squareup.misk:misk-aws (0.8.0) +34 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.0.0)

com.squareup.wire:wire-runtime MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.8.0 - com.squareup.misk:misk-aws 0.8.0 - com.squareup.misk:misk-crypto 0.8...