Square

5 CVEs across 2 Square products. Browse Square vulnerabilities, severities, and proof-of-concept exploits.

Square products with known CVEs

ProductCVEs
Wire4
Squalor1
Square CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61695High7.52026-09-23Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.1 and 7.0.0-alpha04, Wire's Swift runtime ProtoReader.skipGroup(expe…
CVE-2026-63126High7.52026-09-16Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.4.5 and 7.0.0-alpha04, Wire protobuf readers do not consistently valid…
CVE-2026-45799High7.52026-07-17Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup() and ProtoRea…
CVE-2024-58103Medium5.82025-03-16Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt.
CVE-2020-36645Medium5.52023-01-07A vulnerability, which was classified as critical, was found in square squalor. This affects an unknown part. The manipulation leads to sql injection. Upgradin…