[ Vendor · 2 CVEs ]
square
CVEs affecting square published in the last 30 days, plus any square CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-109391 | 12 Oct 2026 | CVSS 8.1 | Square SquashSquare Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML… | |
| CVE-2026-61695 | 23 Sep 2026 | CVSS 7.5 | Wire Swift runtime: negative LENGTH_DELIMITED length in skipGroup() crashes any protobuf-decoding serviceWire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime… | Fix |