Squareup Wire vulnerabilities

• square wire Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service CVE-2026-45799 Fix available 7.5 HighMay 19, 2026