com.squareup.retrofit2:converter-wire (2.0.0-beta3), com.squareup.wire:wire-compiler (2.0.0) +6 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0)

com.squareup.wire:wire-runtime MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.retrofit2:converter-wire 2.0.0-beta3 - com.squareup.wire:wire-compiler 2.0.0 -...

com.squareup.wire:wire-compiler (2.0.0-beta8), com.squareup.wire:wire-gson-support (2.0.0-beta8) +4 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta8)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta8 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta8 - com.squareup.wire:wire-gson-support 2.0.0-beta8...

com.squareup.wire:wire-compiler (2.0.0-beta6), com.squareup.wire:wire-gson-support (2.0.0-beta6) +3 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta6)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta6 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta6 - com.squareup.wire:wire-gson-support 2.0.0-beta6...

com.squareup.wire:wire-grpc-client (4.4.3), com.squareup.wire:wire-schema (4.4.3) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.4.3)

com.squareup.wire:wire-runtime MAVEN version 4.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.4.3 - com.squareup.wire:wire-schema 4.4.3 - io.dyte:core...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.19), com.squareup.wire:wire-schema (4.0.0-alpha.19) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.19)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.19 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.19 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.16), com.squareup.wire:wire-schema (4.0.0-alpha.16) potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (4.0.0-alpha.16)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.16 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-compiler (2.0.0-beta2), com.squareup.wire:wire-gson-support (2.0.0-beta2) +2 more potentially affected by CVE-2024-58103 via com.squareup.wire:wire-runtime (2.0.0-beta2)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta2 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta2 - com.squareup.wire:wire-gson-support 2.0.0-beta2...

Security Bulletin: IBM Security Verify Information Queue uses a Wire Schema jar with multiple vulnerabilities (CVE-2020-27853, CVE-2021-41093)

Summary The connect image in IBM Security Verify Information Queue ISIQ v10.0.2 uses an older version of the Wire Schema jar file that is vulnerable to remote attackers. ISIQ v10.0.3 upgraded its connect image to include a newer Wire Schema jar that remediates the vulnerabilities. CVE-2020-27853,...