Skip to content
Squareup vulnerabilities
Newest
-
square wire
Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service
CVE-2026-45799
Fix available
7.5 High
-
redhat a-mq streams, squareup okhttp, red hat amq streams 2.2.1 +1 more +3 more
Red hat a-mq streams: component version with information disclosure flaw
CVE-2023-0833
Fix available
4.7 Medium
-
squareup okhttp-brotli
DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb into an HTTP response
CVE-2023-3782
Fix available
5.9 Medium
-
squareup okio
Okio GzipSource unhandled exception Denial of Service
CVE-2023-3635
Public exploitFix available
5.9 Medium
-
square squalor
square squalor sql injection
CVE-2020-36645
Fix available
5.5 Medium
-
squareup connect java software development kit
Insecure Temporary File
CVE-2021-23331
4.4 Medium
-
squareup okhttp
CertificatePinner.java in OkHttp 3.x through 3.12.0 allows man-in-the-middle attackers to bypass...
CVE-2018-20200
Disputed
5.9 Medium
-
squareup retrofit
Directory Traversal vulnerability in Square Retrofit
CVE-2018-1000850
Public exploitFix available
7.5 High
-
squareup retrofit
XML External Entity (XXE) vulnerability in Square Retrofit
CVE-2018-1000844
Public exploitFix available
9.1 Critical
-
squareup okhttp, okhttp3 +1 more
Improper Certificate Validation in OkHttp
CVE-2016-2402
Public exploitFix available
5.9 Medium
-
squareup git-fastclone
Git-fastclone passes user modifiable strings directly to a shell command
CVE-2015-8969
Fix available
9.8 Critical
-
squareup git-fastclone
git-fastclone permits arbitrary shell command execution from .gitmodules
CVE-2015-8968
Fix available
8.8 High