Skip to content
OpenAdvisories

Product · square

Squash

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-109391

    Square Squash through commit e73f280 Unauthenticated YAML Deserialization via Symbolication API

    Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the POST /api/1.0/symbolication endpoint. When occurrences referencing the attacker-controlled symbolicatio…

    square Squash