Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-9rm7-3qhh-h2mc
  • Maven/com.squareup.wire:wire-runtime
 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799) 17 Sep
  • Fix available
  • Severity - 7.5 (High)
GHSA-7xpr-hc2w-34m9
  • Maven/com.squareup.wire:wire-runtime
  • Maven/com.squareup.wire:wire-runtime-jvm
 Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service 19 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-pwf9-q62p-v7wc
  • Maven/com.squareup.wire:wire-runtime
 Wire has Uncontrolled Recursion on Nested Groups 16 Mar 2025
  • Fix available
  • Severity - 5.8 (Medium)