Login Request a demo
SQ
Product
squidex
by Squidex · last CVE Apr 22, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 5Medium 3Low 0
Severity
All severities8Critical0High5Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add squidex to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-24736
8.8
0%
Jan 27
Squidex has Server-Side Request Forgery (SSRF) Issue in Webhook Configuration
Affected: <= 7.21.0
CVE-2026-41172
7.3
0%
Apr 22
Squidex vulnerable to Server-Side Request Forgery (SSRF) via URL-based asset upload (/api/apps/{app}/assets)
Affected: < 7.23.0
CVE-2026-41171
7.3
0%
Apr 22
SSRF via Jint Scripting Engine HTTP Functions Due to Missing SSRF Protection on "Jint" HttpClient
Affected: < 7.23.0
CVE-2026-41170
7.2
0%
Apr 22
Squidex has SSRF via Backup Restore Endpoint — Admin-Controlled URL Download Allows Internal and External Requests
Affected: < 7.23.0
CVE-2023-46253
7.2
2%
Nov 7
Remote code execution in Squidex
Affected: < 7.9.0
CVE-2023-46252
6.1
0%
Nov 7
Cross-Site Scripting (XSS) via postMessage Handler in Squidex
Affected: < 7.9.0
CVE-2026-41177
5.5
0%
Apr 22
Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction
Affected: < 7.23.0
CVE-2023-46744
5.4
0%
Nov 7
Stored Cross-site Scripting in Squidex
Affected: < 7.9.0
Showing 8