com.squareup.wire:wire-runtime
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799) | com.squareup.wire:wire-runtime | Maven | High | Fix reported | |
| Wire has Uncontrolled Recursion on Nested Groups | com.squareup.wire:wire-runtime | Maven | Medium | Fix reported | |
| Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service | com.squareup.wire:wire-runtime-jvmcom.squareup.wire:wire-runtime | MavenRed Hat | High | Fix reported |