Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fp4e-gxus-eudn
SummaryWire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service
Aliases
0
alias CVE-2026-45799
1
alias GHSA-7xpr-hc2w-34m9
Fixed_packages
0
url pkg:maven/com.squareup.wire/wire-runtime@6.3.0
purl pkg:maven/com.squareup.wire/wire-runtime@6.3.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.squareup.wire/wire-runtime@6.3.0
1
url pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha03
purl pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha03
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha03
Affected_packages
0
url pkg:maven/com.squareup.wire/wire-runtime@6.2.0
purl pkg:maven/com.squareup.wire/wire-runtime@6.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fp4e-gxus-eudn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.squareup.wire/wire-runtime@6.2.0
1
url pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha01
purl pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha01
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fp4e-gxus-eudn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha01
2
url pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha02
purl pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha02
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fp4e-gxus-eudn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.squareup.wire/wire-runtime@7.0.0-alpha02
3
url pkg:maven/com.squareup.wire/wire-runtime-jvm@5.3.3
purl pkg:maven/com.squareup.wire/wire-runtime-jvm@5.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-fp4e-gxus-eudn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.squareup.wire/wire-runtime-jvm@5.3.3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-45799
reference_id
reference_type
scores
0
value 0.00055
scoring_system epss
scoring_elements 0.17609
published_at 2026-06-12T12:55:00Z
1
value 0.00055
scoring_system epss
scoring_elements 0.17601
published_at 2026-06-14T12:55:00Z
2
value 0.00055
scoring_system epss
scoring_elements 0.17626
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-45799
1
reference_url https://github.com/square/wire
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/square/wire
2
reference_url https://github.com/square/wire/pull/3595
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/square/wire/pull/3595
3
reference_url https://github.com/square/wire/pull/3597
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/square/wire/pull/3597
4
reference_url https://github.com/advisories/GHSA-7xpr-hc2w-34m9
reference_id GHSA-7xpr-hc2w-34m9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7xpr-hc2w-34m9
5
reference_url https://github.com/square/wire/security/advisories/GHSA-7xpr-hc2w-34m9
reference_id GHSA-7xpr-hc2w-34m9
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/square/wire/security/advisories/GHSA-7xpr-hc2w-34m9
Weaknesses
0
cwe_id 129
name Improper Validation of Array Index
description The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fp4e-gxus-eudn