com.squareup.wire:wire-grpc-client (4.0.0-alpha.10), com.squareup.wire:wire-schema (4.0.0-alpha.10) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.10)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.10 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.10 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.9), com.squareup.wire:wire-schema (4.0.0-alpha.9) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.9)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.9 - com.squareup.wire:wire-schema...

com.squareup.misk:misk (0.18.0), com.squareup.misk:misk-aws (0.18.0) +42 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.4)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.misk:misk 0.18.0 - com.squareup.misk:misk-aws 0.18.0 -...

com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=1.7.2-micronaut-1.0, <=2.2.2-micronaut-3.0), com.amazonaws:amazon-kinesis-producer (>=0.14.12, <=0.15.7) +113 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.7.1)

com.squareup.wire:wire-runtime MAVEN version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.agorapulse:micronaut-amazon-awssdk-kinesis-worker =1.7.2-micronaut-1.0, =0.14.12, =1.0.191,...

com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator (0.1.8), com.codellyrandom:wire-typescript-generator (>=0.1.0, <=0.1.8) +44 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.7.0)

com.squareup.wire:wire-runtime MAVEN version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.codellyrandom.wiretypescriptgenerator:wire-typescript-generator 0.1.8 -...

app.cash.backfila:client (0.1.3-20210127.1838-76ab4fc), app.cash.backfila:client-misk (0.1.3-20210127.1838-76ab4fc) +16 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (3.5.0)

com.squareup.wire:wire-runtime MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:client 0.1.3-20210127.1838-76ab4fc - app.cash.backfila:client-misk...

com.squareup.wire:wire-grpc-client (4.4.3), com.squareup.wire:wire-schema (4.4.3) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.3)

com.squareup.wire:wire-runtime MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.4.3 - com.squareup.wire:wire-schema 4.4.3 - io.dyte:core...

app.cash.backfila:backfila-embedded (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42), app.cash.backfila:client-base (>=2023.08.14.172409-6d1d2a2, <=2024.08.23.143736-34a2a42) +8 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.2)

com.squareup.wire:wire-runtime MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - app.cash.backfila:backfila-embedded =2023.08.14.172409-6d1d2a2, =2023.08.14.172409-6d1d2a2,...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.20), com.squareup.wire:wire-schema (4.0.0-alpha.20) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.20)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.20 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.20 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.19), com.squareup.wire:wire-schema (4.0.0-alpha.19) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.19)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.19 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.17), com.squareup.wire:wire-schema (4.0.0-alpha.17) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.17)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.17 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.17 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-compiler (2.0.0-beta6), com.squareup.wire:wire-gson-support (2.0.0-beta6) +3 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta6)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta6 - com.squareup.wire:wire-gson-support 2.0.0-beta6...

com.squareup.wire:wire-compiler (2.0.0-beta9), com.squareup.wire:wire-gson-support (2.0.0-beta9) +4 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta9)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta9 - com.squareup.wire:wire-gson-support 2.0.0-beta9...

com.squareup.wire:wire-compiler (2.0.0-beta8), com.squareup.wire:wire-gson-support (2.0.0-beta8) +4 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta8)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta8 - com.squareup.wire:wire-gson-support 2.0.0-beta8...

com.squareup.wire:wire-grpc-client (4.5.4), com.squareup.wire:wire-schema (4.5.4) +3 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.5.4)

com.squareup.wire:wire-runtime MAVEN version 4.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.5.4 - com.squareup.wire:wire-schema 4.5.4 -...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to improper enforcement of recursion limits in ByteArrayProtoReader32.kt and ProtoReader.kt. An attacker can cause a denial of service by sending deeply nested group structures. Remediation Upgrade...

androidx.benchmark:benchmark-common (>=1.1.0-alpha07, <=1.4.0-alpha07), androidx.benchmark:benchmark-junit4 (>=1.1.0-alpha07, <=1.2.4) +441 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (>=1.0.0, <=5.1.0)

com.squareup.wire:wire-runtime MAVEN version =1.0.0, =1.1.0-alpha07, =1.1.0-alpha07, =1.1.0-alpha02, =1.1.0-alpha02, =0.1.4-20211109.2053-a41370d, =0.1.0, =0.1.4-20211109.2053-a41370d, =0.1.4-20211109.2053-a41370d, =0.1.4-20220406.2256-c2ad520, =0.1.4-20211109.2053-a41370d, =0.1.0,...

com.squareup.wire:wire-compiler (1.4.0), com.squareup.wire:wire-gson-support (1.4.0) +2 more potentially affected by CVE-2023-3635 via com.squareup.okio:okio (0.6.0)

com.squareup.okio:okio MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okio:okio and may be impacted: - com.squareup.wire:wire-compiler 1.4.0 - com.squareup.wire:wire-gson-support 1.4.0 -...

com.squareup.wire:wire-compiler (1.5.0), com.squareup.wire:wire-gson-support (1.5.0) +2 more potentially affected by CVE-2023-3635 via com.squareup.okio:okio (0.9.0)

com.squareup.okio:okio MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.okio:okio and may be impacted: - com.squareup.wire:wire-compiler 1.5.0 - com.squareup.wire:wire-gson-support 1.5.0 -...