Skip to content
OpenAdvisories

Package · Maven

com.squareup.wire:wire-runtime-jvm

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2026-45799

    Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service

    Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup() and ProtoReader.skipGroup() in wire-runtime do not validate that a LENGTH_DELIMITED field length is non-negative…

    square wire grpc com.squareup.wire:wire-runtime Ubuntu Maven