Search for packages
| purl | pkg:maven/com.squareup.wire/wire-runtime-jvm@5.3.3 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-fp4e-gxus-eudn
Aliases: CVE-2026-45799 GHSA-7xpr-hc2w-34m9 |
Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-11T20:38:46.659405+00:00 | GHSA Importer | Affected by | VCID-fp4e-gxus-eudn | https://github.com/advisories/GHSA-7xpr-hc2w-34m9 | 38.6.0 |