SSquare

Products

Exploited and recent CVEs

• CVE-2026-109391 High 8.1 Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API 0.5%
• CVE-2026-61695 High 7.5 Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding service 0.7%
• CVE-2026-63126 High 7.5 Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799) 0.8%
• CVE-2026-45799 High 7.5 Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service 0.7%
• CVE-2024-58103 Medium 5.8 Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt. 0.4%
• CVE-2020-36645 Medium 5.5 square squalor sql injection 0.7%